Lucene search
+L

1 matches found

CVE
CVE
added 2023/08/18 1:11 p.m.60 views

CVE-2023-31232

CVE-2023-31232: WordPress Plugins List plugin (≤ 2.5) is vulnerable to stored XSS (admin+). Root cause involves insufficient escaping in plugin output (e.g., replace_plugin_list_tags). Impact and exploitability are described in connected sources as admin-privileged, stored XSS with potential risk...

5.9CVSS5AI score0.00369EPSS
Save