CVE-2023-5577

CVE-2023-5577 concerns Bitly’s WordPress plugin (wp-bitly). The vulnerability is a Stored Cross-Site Scripting (XSS) in the plugin’s wpbitly shortcode due to insufficient input sanitization and output escaping of user-supplied attributes. It affects all versions up to and including 2.7.1. Exploit...

WordPress Bitly Plugin <= 2.7.1 is vulnerable to Cross Site Scripting (XSS)

Software Bitly Type Plugin Vulnerable versions = 2.7.1 Fixed in 2.7.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5577 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b8be7a26a071 Credits Lana Codes Required privilege...