2 matches found
CVE-2023-0070
The ResponsiveVoice Text To Speech WordPress plugin before 1.7.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scriptin...
5.4CVSS6.1AI score0.00623EPSS
SaveExploits2References1
Cross site scripting
The ResponsiveVoice Text To Speech WordPress plugin before 1.7.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scriptin...
4.9CVSS5.4AI score0.00623EPSS
SaveExploits2References1Affected Software1
20