Podatność CVE-2023-2029

Podatność CVE-2023-2029

Publikacja: 2023-07-10

Opis:

The PrePost SEO WordPress plugin through 3.0 does not properly sanitize some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting (XSS) attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

W naszej bazie, znaleźliśmy następujące noty dla tego CVE:

	Tytuł	Autor	Data
Low	WordPress PrePost SEO 3.0 Cross Site Scripting	Taurus Omar	27.07.2023

Typ:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Referencje:

https://wpscan.com/vulnerability/4889ad5a-c8c4-4958-b176-64560490497b

Copyright 2024, cxsecurity.com