Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 2:31 a.m.•17 views

CVE-2023-1259

The Hotjar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the hotjarsiteid in versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above...

5.5CVSS5AI score0.00616EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/10/14 12:15 p.m.•11 views

CVE-2023-1259

The Hotjar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the hotjarsiteid in versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above...

5.5CVSS6AI score0.00616EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/14 12:00 a.m.•5 views

CVE-2023-1259: Improper Neutralization of Input During Web Page Generation

The Hotjar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the hotjarsiteid in versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above...

5.5CVSS6AI score0.00616EPSS
SaveExploits1References3
Rows per page
Query Builder