CVE-2023-6161

The WP Crowdfunding WordPress plugin before 2.1.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-6161

The WP Crowdfunding WordPress plugin prior to 2.1.9 is affected by a Reflected Cross-Site Scripting (XSS) flaw: it does not sanitize/escape an input parameter before echoing it back in the page, enabling injection that could affect high-privilege accounts (e.g., admins). Technical details across ...

CVE-2023-6161 WP Crowdfunding < 2.1.9 - Reflected XSS

The WP Crowdfunding WordPress plugin before 2.1.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...