CVE-2023-25787

creationtimestamp| type| source ---|---|--- 2023-05-03 14:30:53+00:00| seen| https://t.me/cibsecurity/63207...

CVE-2023-25787

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wbolt team WP资源下载管理 plugin = 1.3.9 versions...

CVE-2023-25787 WordPress WP资源下载管理 Plugin <= 1.3.9 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wbolt team WP资源下载管理 plugin = 1.3.9 versions...

CVE-2023-25787

CVE-2023-25787 affects the WordPress plugin WP资源下载管理 (Download Info Page) versions ≤ 1.3.9. It enables an authenticated administrator (admin+) to perform a Stored Cross-Site Scripting (XSS) attack due to insufficient sanitisation/escaping of certain settings within the plugin. The issue is rooted...