CVE-2023-1259

CVE-2023-1259 refers to the WordPress Hotjar plugin vulnerability (affected up to version 1.0.15). The issue is a Stored Cross-Site Scripting (XSS) originating from the hotjar_site_id, caused by insufficient input sanitization and output escaping. It requires administrator-level privileges to exp...

WordPress Hotjar Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)

Software Hotjar Type Plugin Vulnerable versions = 1.0.15 Fixed in 1.0.16 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1259 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e7f6eb874af7 Credits Marco Wotschka Required privile...