CVE-2023-31232

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in David Artiss Plugins List plugin = 2.5 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in David Artiss Plugins List plugin = 2.5 versions...

CVE-2023-31232

CVE-2023-31232: WordPress Plugins List plugin (≤ 2.5) is vulnerable to stored XSS (admin+). Root cause involves insufficient escaping in plugin output (e.g., replace_plugin_list_tags). Impact and exploitability are described in connected sources as admin-privileged, stored XSS with potential risk...