CVE-2023-46782

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Chris Yee MomentoPress for Momento360 plugin = 1.0.1 versions...

CVE-2023-46782

A vulnerability in Chris Yee MomentoPress for Momento360 cmyee-momentopress.This issue affects MomentoPress for Momento360: from n/a through = 1.0.1...

CVE-2023-46782

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Chris Yee MomentoPress for Momento360 plugin = 1.0.1 versions...

CVE-2023-46782

CVE-2023-46782 describes a Stored XSS in the Chris Yee MomentoPress for Momento360 WordPress plugin, affected versions

CVE-2023-46782 WordPress MomentoPress for Momento360 Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Chris Yee MomentoPress for Momento360 plugin = 1.0.1 versions...

CVE-2023-46782 WordPress MomentoPress for Momento360 Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Chris Yee MomentoPress for Momento360 plugin = 1.0.1 versions...

PT-2023-30212 · Chris Yee · Chris Yee Momentopress For Momento360

Name of the Vulnerable Software and Affected Versions: Chris Yee MomentoPress for Momento360 plugin version 1.0.1 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability, which requires authentication as a contributor or higher. This vulnerability allows a...

WordPress Plugin MomentoPress for Momento360 Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin MomentoPre...

MomentoPress for Momento360 < 1.0.2 - Contributor+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress MomentoPress for Momento360 Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software MomentoPress for Momento360 Type Plugin Vulnerable versions = 1.0.1 Fixed in 1.0.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-46782 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID f1a1dbc78af1 Credits Ngô Thiên An ancorn...