2 matches found
CVE-2023-2995
The Leyka WordPress plugin before 3.30.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
4.8CVSS5.6AI score0.00379EPSS
SaveExploits2References1
Cross site scripting
The Leyka WordPress plugin before 3.30.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
4.3CVSS4.9AI score0.00379EPSS
SaveExploits2References1Affected Software1
20