CVE-2023-29387

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Julien Crego Manager for Icomoon plugin = 2.0 versions...

CVE-2023-29387

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Julien Crego Manager for Icomoon plugin = 2.0 versions...

CVE-2023-29387

CVE-2023-29387 affects the WordPress plugin Manager for Icomoon (Julien Crego) with a Stored Cross-Site Scripting (XSS) vulnerability in versions ≤ 2.0, exploitable by users with contributor+ permissions. Multiple sources corroborate a fix in version 2.2; update to >2.0 (ideally 2.2 or later) ...

CVE-2023-29387 WordPress Manager for Icomoon Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Julien Crego Manager for Icomoon plugin = 2.0 versions...

WordPress Manager for Icomoon Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

Software Manager for Icomoon Type Plugin Vulnerable versions = 2.1 Fixed in 2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-29387 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 56e431222ec5 Credits deokhunKim Requir...