Vulnerability · Published Sep 15, 2026 · Assigned by ENISA
CVE-2026-87793Reflected XSS in WordPress theme design-scuole-wordpress-theme
Medium 5.1
In plain English
A medium-severity cross-site scripting in design-scuole-wordpress-theme from Developers Italia. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Severity (CVSS 4.0)5.1Medium
Exploit odds (30 days)0.5%top 56.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Developers Italia | design-scuole-wordpress-theme | 1.0 – through 2.18.2 |
Weakness: CWE-79 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N