3 matches found
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Oliver Schlöbe Simple Yearly Archive plugin = 2.1.8 versions...
4.3CVSS4.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
CVE-2023-25484 WordPress Simple Yearly Archive Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Oliver Schlöbe Simple Yearly Archive plugin = 2.1.8 versions...
5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
CVE-2023-25484
CVE-2023-25484 affects the WordPress plugin Simple Yearly Archive (Oliver Schlöbe) up to version 2.1.8. It is a Stored XSS vulnerability that requires admin+ authentication to exploit. Public sources specify the vulnerable component as the plugin’s code handling user input, with the impact descri...
5.9CVSS4.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
20