CVE-2023-49842

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpexpertsio Rocket Maintenance Mode & Coming Soon Page allows Stored XSS.This issue affects Rocket Maintenance Mode & Coming Soon Page: from n/a through 4.3...

CVE-2023-49842

CVE-2023-49842 affects the WordPress plugin Rocket Maintenance Mode & Coming Soon Page (versions n/a–4.3). Root cause: Improper Neutralization of Input During Web Page Generation, enabling a Stored XSS vulnerability. Impact is stored XSS against site visitors; exploit requires administrator input...

WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS)

Software Rocket Maintenance Mode & Coming Soon Page Type Plugin Vulnerable versions = 4.3 Fixed in 4.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49842 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a85d00ace7c4 Credits emad Required...