CVE-2023-1166

The CVE-2023-1166 issue affects the USM-Premium WordPress plugin prior to version 16.3. The root cause is inadequate sanitization/escaping of certain plugin settings, enabling Stored XSS by high-privilege users (e.g., administrators) even when unfiltered_html is disallowed (e.g., in multisite set...

WordPress Social Media & Share Icons Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)

Software Social Media & Share Icons Type Plugin Vulnerable versions = 2.8.1 Fixed in 2.8.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1166 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e1cf41a27d19 Credits Mohamed Selim...