CVE-2023-3647

creationtimestamp| type| source ---|---|--- 2024-01-16 17:27:25+00:00| seen| https://t.me/ctinow/168912 2024-01-22 23:16:58+00:00| seen| https://t.me/ctinow/171531 2024-02-06 10:41:45+00:00| seen| https://t.me/ctinow/179887...

CVE-2023-3647

CVE-2023-3647 affects the IURNY by INDIGITALL WordPress plugin (pre-3.2.3). The issue is a Stored XSS due to incomplete sanitisation/escaping of certain settings, enabling high-privilege users (e.g., admins) to inject scripts even when unfiltered_html is disabled (such as in multisite). Impact ap...