CVE-2009-10004

A vulnerability was found in Turante Sandbox Theme up to 1.5.2. It has been classified as problematic. This affects the function sandbox_body_class of the file functions.php. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.6.1 is able to address this issue. The identifier of the patch is 8045b1e10970342f558b2c5f360e0bd135af2b10. It is recommended to upgrade the affected component. The identifier VDB-225357 was assigned to this vulnerability.

• CWE-79

• https://github.com/Turante/sandbox-theme/commit/8045b1e10970342f558b2c5f360e0bd135af2b10Patch
• https://github.com/Turante/sandbox-theme/releases/tag/1.6.1Release Notes
• https://vuldb.com/?ctiid.225357Permissions Required, Third Party Advisory
• https://vuldb.com/?id.225357Permissions Required, Third Party Advisory
• https://github.com/Turante/sandbox-theme/commit/8045b1e10970342f558b2c5f360e0bd135af2b10Patch
• https://github.com/Turante/sandbox-theme/releases/tag/1.6.1Release Notes
• https://vuldb.com/?ctiid.225357Permissions Required, Third Party Advisory
• https://vuldb.com/?id.225357Permissions Required, Third Party Advisory

Published

Apr 10, 2023

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0998Unspecified vulnerability in the PeopleSoft Enterprise HRMS …
• CVE-2009-0999Unspecified vulnerability in the Oracle Application Object L…
• CVE-2009-1000The Oracle Applications Framework component in Oracle E-Busi…
• CVE-2009-10001A vulnerability classified as problematic was found in jianl…6.1
• CVE-2009-10002A vulnerability, which was classified as problematic, has be…6.1
• CVE-2009-10003A vulnerability was found in capnsquarepants wordcraft up to…6.1
• CVE-2009-10005ContentKeeper Web Appliance (now maintained by Impero Softwa…8.7
• CVE-2009-10006UFO: Alien Invasion versions up to and including 2.2.1 conta…9.3
• CVE-2009-10007Catalyst::Plugin::Authentication versions before 0.10_027 fo…9.1
• CVE-2009-1001Unspecified vulnerability in Oracle BEA WebLogic Portal 8.1 …
• CVE-2009-1002Unspecified vulnerability in Oracle BEA WebLogic Server 10.3…
• CVE-2009-1003Unspecified vulnerability in the WebLogic Server component i…