Vulnerability CVE-2023-2123
Published: 2023-08-16

Description:
The WP Inventory Manager WordPress plugin before 2.1.0.13 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.

Type:

CWE-79

 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://wpscan.com/vulnerability/44448888-cd5d-482e-859e-123e442ce5c1
https://github.com/daniloalbuqrque/poc-cve-xss-encoded-wp-inventory-manager-plugin
Copyright 2026, cxsecurity.com

 

Back to Top