PT-2023-17389 · WordPress · Front Editor

Name of the Vulnerable Software and Affected Versions: The Front Editor WordPress plugin versions 4.0.4 and earlier Description: The issue allows high-privilege users to perform Stored Cross-Site Scripting attacks due to the lack of sanitization and escaping of some form settings. This can occur...

CVE-2023-1982: Undefined Security Weakness

The Front Editor WordPress plugin through 4.0.4 does not sanitize and escape some of its form settings, which could allow high-privilege users to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...