10 matches found
CVE-2023-30753
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Phan Chuong IP Metaboxes plugin = 2.1.1...
CVE-2023-30745
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Phan Chuong IP Metaboxes plugin = 2.1.1 versions...
CVE-2023-30753
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Phan Chuong IP Metaboxes plugin = 2.1.1...
CVE-2023-30745
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Phan Chuong IP Metaboxes plugin = 2.1.1 versions...
CVE-2023-30745
CVE-2023-30745 affects the WordPress plugin IP Metaboxes (Phan Chuong) ≤ 2.1.1. An authenticated admin+ can trigger a Stored XSS due to inadequate sanitization/escaping of settings, potentially affecting admin sessions and loaded pages. The connected documents provide limited detail on exploit st...
CVE-2023-30745 WordPress IP Metaboxes Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Phan Chuong IP Metaboxes plugin = 2.1.1 versions...
CVE-2023-30753
CVE-2023-30753 affects the WordPress plugin IP Metaboxes by Phan Chuong, with unauthenticated Reflected Cross-Site Scripting (XSS) in versions 2.1.1 to mitigate the vulnerability. The CVE entry is not described as rejected in the provided materials.
PT-2023-22948
Name of the Vulnerable Software and Affected Versions Phan Chuong IP Metaboxes plugin versions prior to 2.1.1 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations For Phan Chuong IP Metaboxes plugi...
CVE-2023-30753: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Phan Chuong IP Metaboxes plugin = 2.1.1...
CVE-2023-30745: Improper Neutralization of Input During Web Page Generation
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Phan Chuong IP Metaboxes plugin = 2.1.1 versions...