3 matches found
CVE-2023-7228
The illi Link Party! WordPress plugin through 1.0 does not sanitise and escape some parameters, which could allow unauthenticated vistors to perform Cross-Site Scripting attacks...
6.1CVSS6.2AI score0.00324EPSS
SaveExploits2References3
CVE-2023-7228
The illi Link Party! WordPress plugin through 1.0 does not sanitise and escape some parameters, which could allow unauthenticated vistors to perform Cross-Site Scripting attacks...
6.1CVSS0.00324EPSS
SaveExploits2References1
CVE-2023-7228
The illi Link Party! WordPress plugin, specifically version 1.0 and earlier, is vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) . The root cause is the plugin's failure to properly sanitise and escape certain parameters. This flaw allows unauthenticated visitors to perform XSS att...
6.1CVSS8.8AI score0.00324EPSS
SaveExploits2References1Affected Software1
20