Vulnerability CVE-2023-1377


Published: 2023-04-03

Description:
The Solidres WordPress plugin through 0.9.4 does not sanitise and escape numerous parameter before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://wpscan.com/vulnerability/c346ff80-c16b-4219-8983-708c64fa4a61

Copyright 2026, cxsecurity.com

 

Back to Top