Lucene search
+L

4 matches found

NVD
NVD
added 2023/11/30 4:15 p.m.25 views

CVE-2023-39921

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Molongui Author Box, Guest Author and Co-Authors for Your Posts – Molongui allows Stored XSS.This issue affects Author Box, Guest Author and Co-Authors for Your Posts – Molongui: from n/a through...

5.9CVSS0.00386EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/30 3:47 p.m.70 views

CVE-2023-39921

CVE-2023-39921 describes a Stored XSS in the Molongui Author Box, Guest Author and Co-Authors for Your Posts plugin for WordPress (up to 4.6.19). The issue stems from improper input sanitization during web page generation, enabling injection of scripts by authenticated administrators. Affected co...

5.9CVSS6.5AI score0.00386EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/30 3:47 p.m.32 views

CVE-2023-39921 WordPress Molongui Plugin <= 4.6.19 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Molongui Author Box, Guest Author and Co-Authors for Your Posts – Molongui allows Stored XSS.This issue affects Author Box, Guest Author and Co-Authors for Your Posts – Molongui: from n/a through...

5.9CVSS6AI score0.00386EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2023/11/28 12:00 a.m.12 views

WordPress Molongui Plugin <= 4.6.19 is vulnerable to Cross Site Scripting (XSS)

Software Molongui Type Plugin Vulnerable versions = 4.6.19 Fixed in 4.6.20 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-39921 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 029ebb9b0195 Credits Abdullah Mudzakir Required privilege...

5.9CVSS6.6AI score0.00386EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder