CVE-2023-0421

CVE-2023-0421 refers to a reflected XSS in the Cloud Manager WordPress plugin, affecting versions <= 1.0. The issue arises because the query parameter with the value of the field named (in reports) “ricerca” is not sanitized/escaped before being output in an admin panel, which allows an unauth...