CVE-2023-39988

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in 标准云std.Cloud WxSync plugin = 2.7.23 versions...

CVE-2023-39988 WordPress WxSync Plugin <= 2.7.23 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in 标准云std.Cloud WxSync plugin = 2.7.23 versions...

CVE-2023-39988

CVE-2023-39988 describes a Stored Cross-Site Scripting (XSS) vulnerability in the WxSync plugin for std.Cloud/WxSync (WordPress) &lt;= 2.7.23. The issue is exploitable by authenticated contributors and can lead to stored malicious scripts within the plugin’s context. Public records indicate the a...

PT-2023-27194 · Std.Cloud · Wxsync Plugin

Name of the Vulnerable Software and Affected Versions: std.Cloud WxSync plugin versions = 2.7.23 Description: A Stored Cross-Site Scripting XSS vulnerability exists, allowing authenticated contributors to inject malicious scripts. The issue affects versions of the WxSync plugin up to and includin...