CVE-2023-32582

CVE-2023-32582 affects the WordPress plugin Don8 by Kyle Maurer, for versions ≤ 0.4. It is a stored XSS vulnerability that requires admin+ privileges to exploit. Root cause: input handling in Don8 allows injection that persists and could affect admins/users. Impact, per sources: stored XSS with p...

WordPress Don8 Plugin <= 0.4 is vulnerable to Cross Site Scripting (XSS)

Software Don8 Type Plugin Vulnerable versions = 0.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32582 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d202b800d3e6 Credits Yash Kanchhal Required privilege...