CVE-2023-5114

creationtimestamp| type| source ---|---|--- 2023-10-31 15:50:53+00:00| seen| https://t.me/cibsecurity/73221...

CVE-2023-5114

CVE-2023-5114 affects the WordPress idbbee plugin up to version 1.0, exposing a stored XSS via the idbbee shortcode due to insufficient input sanitization/output escaping. Exploitation requires authenticated access at contributor level or higher, enabling injection of scripts that run when users ...

WordPress idbbee Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software idbbee Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5114 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5bc71d675255 Credits István Márton Required privilege...