6 matches found
CVE-2023-46088
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mammothology WP Full Stripe Free plugin = 1.6.1 versions...
WordPress WP Full Stripe Free Plugin <= 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF)
Software WP Full Stripe Free Type Plugin Vulnerable versions = 7.0.16 Fixed in 7.0.18 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47667 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6cc196fbcb6c Credits LEE SE HYOUNG...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mammothology WP Full Stripe Free plugin = 1.6.1 versions...
CVE-2023-46088
CVE-2023-46088 refers to a stored XSS in the WordPress plugin “WP Full Stripe Free” (Mammothology WP Full Stripe Free) affecting versions ≤ 1.6.1. The vulnerability requires administrator privileges (Authenticated) and involves injection of scripts via the plugin’s admin-facing functionality, wit...
