WordPress WPLegalPages Plugin <= 2.9.2 is vulnerable to Cross Site Scripting (XSS)

🗓️ 11 Oct 2023 00:00:00Reported by Lana CodesType

WordPress WPLegalPages Plugin <= 2.9.2 Cross Site Scripting vulnerabilit

Reporter	Title	Published	Views	Family All 7
NVD	CVE-2023-4968	20 Oct 202307:15	–	nvd
Prion	Cross site scripting	20 Oct 202307:15	–	prion
CVE	CVE-2023-4968	20 Oct 202307:15	–	cve
WPVulnDB	WPLegalPages < 2.9.3 - Contributor+ Stored XSS	20 Oct 202300:00	–	wpvulndb
Cvelist	CVE-2023-4968	20 Oct 202306:35	–	cvelist
Wordfence Blog	Over 100 WordPress Repository Plugins Affected by Shortcode-based Stored Cross-Site Scripting	12 Dec 202317:18	–	wordfence
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 9, 2023 to October 15, 2023)	19 Oct 202315:52	–	wordfence

Vulners

Node

wpeka_club wplegalpagesRange≤2.9.2

Source	Link
wordpress	www.wordpress.org/plugins/wplegalpages/
cve	www.cve.org/CVERecord
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wplegalpages/wplegalpages-292-authenticated-author-stored-cross-site-scripting-via-shortcode

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo