Vulnerability CVE-2023-0602


Published: 2023-07-31

Description:
The Twittee Text Tweet WordPress plugin through 1.0.8 does not properly escape POST values which are printed back to the user inside one of the plugin's administrative page, which allows reflected XSS attacks targeting administrators to happen.

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://wpscan.com/vulnerability/c357f93d-4f21-4cd9-9378-d97756c75255

Copyright 2026, cxsecurity.com

 

Back to Top