CVE-2021-24982: Childtheme-Generator Child Theme Generator

Medium severity, CVSS 6.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The Child Theme Generator WordPress plugin through 2.2.7 does not sanitise escape the parade parameter before outputting it back, leading to a Reflected Cross-Site Scripting in the admin dashboard

Affected products

• Childtheme-Generator Child Theme Generator: up to and including 2.2.7

Published 2022-03-14. Last modified 2026-06-17.