CVE-2023-36692

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Christian Kramer & Hendrik Thole WP-Cirrus plugin = 0.6.11 versions...

CVE-2023-36692

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Christian Kramer & Hendrik Thole WP-Cirrus plugin = 0.6.11 versions...

CVE-2023-36692 WordPress WP-Cirrus Plugin <= 0.6.11 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Christian Kramer & Hendrik Thole WP-Cirrus plugin = 0.6.11 versions...

CVE-2023-36692

WP-Cirrus plugin for WordPress is affected by a stored XSS vulnerability (CVE-2023-36692) that requires authenticated admin+ privileges. The issue affects versions up to and including 0.6.11. The impact is described as cross-site scripting with potential for admin-level abuse, and remediation is ...

WordPress WP-Cirrus Plugin <= 0.6.11 is vulnerable to Cross Site Scripting (XSS)

Software WP-Cirrus Type Plugin Vulnerable versions = 0.6.11 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-36692 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 901c83317f18 Credits LEE SE HYOUNG hackintoanetwork...