CVE-2023-44263

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Riyaz Social Metrics plugin = 2.2 versions...

CVE-2023-44263

CVE-2023-44263 affects the WordPress plugin Riyaz Social Metrics (versions <= 2.2). It is a Stored Cross-Site Scripting (XSS) vulnerability that requires admin+ authentication to exploit. The NVD entry lists a base CVSS v3.1 score of 4.8 (Medium), while PatchStack describes the vulnerability w...

WordPress Social Metrics Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)

Software Social Metrics Type Plugin Vulnerable versions = 2.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-44263 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8d2a9afb7ce0 Credits Rio Darmawan Required...