CVE-2023-6082

CVE-2023-6082 affects the chartjs WordPress plugin (through version 2023.2). The root cause is inadequate sanitization/escapes of certain plugin settings, enabling stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (such as in multisite). Connected sources s...

CVE-2023-6081

CVE-2023-6081 affects the WordPress Chart.js plugin “enigma-chartjs” up to version 2023.2. The vulnerability arises from insufficient sanitization/escaping of certain settings, potentially enabling Stored Cross-Site Scripting by high-privilege users (e.g., Editor) even when unfiltered_html is dis...