CVE-2023-46088

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mammothology WP Full Stripe Free plugin = 1.6.1 versions...

CVE-2023-46088

CVE-2023-46088 refers to a stored XSS in the WordPress plugin “WP Full Stripe Free” (Mammothology WP Full Stripe Free) affecting versions ≤ 1.6.1. The vulnerability requires administrator privileges (Authenticated) and involves injection of scripts via the plugin’s admin-facing functionality, wit...

CVE-2023-46088 WordPress WP Full Stripe Free Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mammothology WP Full Stripe Free plugin = 1.6.1 versions...

WordPress WP Full Stripe Free Plugin < 7.0.6 is vulnerable to Cross Site Scripting (XSS)

Software WP Full Stripe Free Type Plugin Vulnerable versions 7.0.6 Fixed in 7.0.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46088 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 9105f031f270 Credits LEE SE HYOUNG...