CVE-2023-28174

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in eLightUp eRocket plugin = 1.2.4 versions...

CVE-2023-28174

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in eLightUp eRocket plugin = 1.2.4 versions...

CVE-2023-28174

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in eLightUp eRocket plugin = 1.2.4 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in eLightUp eRocket plugin = 1.2.4 versions...

CVE-2023-28174

CVE-2023-28174 : Stored XSS in the WordPress plugin eRocket (eLightUp) up to version 1.2.4. Exploitation requires admin-level privileges. Root cause is a stored XSS in eRocket’s admin-exposed context. Version 1.2.5 fixes the issue. Remediation: upgrade to 1.2.5 or later; PatchStack confirms fixed...