CVE-2023-2309

The CVE-2023-2309 entry corresponds to a Reflected Cross-Site Scripting flaw in the WordPress wpForo Forum plugin prior to 2.1.9. The vulnerability arises from insufficient input sanitization and output escaping in the wpforo_debug function, allowing unauthenticated attackers to inject script whe...

WordPress wpForo Forum Plugin < 2.1.9 is vulnerable to Cross Site Scripting (XSS)

Software wpForo Forum Type Plugin Vulnerable versions 2.1.9 Fixed in 2.1.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2309 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID f15f5dd16590 Credits Alex Sanford Required privile...