CVE-2023-3292

CVE-2023-3292 affects the WordPress plugin grid-kit-premium prior to 2.2.0. The root cause is failure to escape certain parameters and generated URLs before output in attributes, enabling Reflected Cross‑Site Scripting. Impact targets may include admin/high-privilege users. Remediation: upgrade t...

WordPress Grid Kit Premium Plugin < 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Grid Kit Premium Type Plugin Vulnerable versions 2.2.0 Fixed in 2.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3292 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 75b7f5364596 Credits Erwan LR WPScan...