CVE-2023-27425

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in James Irving-Swift Electric Studio Client Login plugin = 0.8.1 versions...

CVE-2023-27425

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in James Irving-Swift Electric Studio Client Login plugin = 0.8.1 versions...

CVE-2023-27425

CVE-2023-27425 affects the WordPress plugin Electric Studio Client Login (James Irving-Swift) <= 0.8.1. The vulnerability is a Stored Cross-Site Scripting (XSS) flaw exploitable by users with admin+ privileges, caused by inadequate input cleanup/output handling. Affected version scope is limit...