Vulnerability CVE-2023-2309


Published: 2023-07-24

Description:
The wpForo Forum WordPress plugin before 2.1.9 does not escape some request parameters while in debug mode, leading to a Reflected Cross-Site Scripting vulnerability.

Type:

CWE-79

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://wpscan.com/vulnerability/1b3f4558-ea41-4749-9aa2-d3971fc9ca0d

Copyright 2026, cxsecurity.com

 

Back to Top