CVE-2023-45059

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gumroad plugin = 3.1.0 versions...

CVE-2023-45059

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gumroad plugin = 3.1.0 versions...

CVE-2023-45059

CVE-2023-45059 affects the WordPress Gumroad plugin up to version 3.1.0, where an Authenticated (Contributor+) Stored Cross‑Site Scripting (XSS) vulnerability exists. The issue arises from insufficient input validation/escaping of parameters, enabling stored XSS when a user with the contributor r...

WordPress Gumroad Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Gumroad Type Plugin Vulnerable versions = 3.1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45059 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ff8b5689e312 Credits Mika Required privilege Contribut...