CVE-2023-32116

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in TotalPress.Org Custom post types, Custom Fields & more plugin = 4.0.12 versions...

CVE-2023-32116

creationtimestamp| type| source ---|---|--- 2023-10-26 16:16:03+00:00| seen| Telegram/oSS156QOvEhEJCv39NUuJBiNhCQmBlhmtanQjYcxj-hkc...

CVE-2023-32116

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in TotalPress.Org Custom post types, Custom Fields & more plugin = 4.0.12 versions...

CVE-2023-32116

CVE-2023-32116 affects the WordPress plugin “TotalPress.Org Custom post types, Custom Fields & more” (versions <= 4.0.12). The root cause is an authenticated stored XSS vulnerability exploitable by users with admin+ privileges; the impact is stored script execution within the plugin’s context ...