Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/06/08 1:55 a.m.57 views

CVE-2023-54351 WordPress Sonaar Music Plugin 4.7 Stored XSS via Comments

WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the comment functionality. Attackers can submit JavaScript payloads in the comment parameter to wp-comments-post.php which are stored an...

7.2CVSS0.00184EPSS
SaveExploits0References2
Rows per page
Query Builder