PT-2023-15969

Name of the Vulnerable Software and Affected Versions Custom Add User WordPress plugin versions prior to 2.0.3 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page...

CVE-2023-0043: Improper Neutralization of Input During Web Page Generation

The Custom Add User WordPress plugin through 2.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...