CVE-2023-47654

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in livescore.Bz BZScore – Live Score plugin = 1.03 versions...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in livescore.Bz BZScore – Live Score plugin = 1.03 versions...

CVE-2023-47654

CVE-2023-47654 affects the WordPress plugin BZScore – Live Score (BZScore – Live Score) up to version 1.03. It is an authenticated Stored Cross-Site Scripting (XSS) via shortcode with contributor-level permissions. The issue’s root cause is insufficient input sanitization/output escaping for user...

livescore.bz Cross Site Scripting vulnerability OBB-2807039

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...