3 matches found
CVE-2023-7069
creationtimestamp| type| source ---|---|--- 2024-02-01 05:21:47+00:00| seen| https://t.me/ctinow/177321 2024-02-22 20:16:04+00:00| seen| https://t.me/ctinow/191102...
CVE-2023-7069
The CVE concerns the WordPress plugin Advanced iFrame (<= 2023.10). The vulnerability is a Stored Cross-Site Scripting (XSS) caused by improper input sanitization and output escaping in the plugin’s advanced_iframe shortcode, enabling authenticated contributors (or higher) to inject scripts on...
WordPress Advanced iFrame Plugin <= 2023.10 is vulnerable to Cross Site Scripting (XSS)
Software Advanced iFrame Type Plugin Vulnerable versions = 2023.10 Fixed in 2024.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-7069 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a79bcd48a9fe Credits Webbernaut Required...