Vulners
Lucene search
2 matches found
CVE-2023-1982
The Front Editor WordPress plugin through 4.0.4 does not sanitize and escape some of its form settings, which could allow high-privilege users to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
4.8CVSS4.8AI score0.00379EPSS
Exploits2References1
CVE-2023-1982 Front Editor <= 4.0.4 - Admin+ Stored XSS
The Front Editor WordPress plugin through 4.0.4 does not sanitize and escape some of its form settings, which could allow high-privilege users to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
5AI score0.00379EPSS
Exploits2References1
20