CVE-2023-4308

CVE-2023-4308 affects the WordPress plugin User Submitted Posts, with Stored Cross-Site Scripting via the user-submitted-content parameter in versions up to and including 20230809. The exploitation is unauthenticated and can cause arbitrary script execution when a user visits an injected page. Pu...

CVE-2016-11001

CVE-2016-11001 affects the WordPress plugin user-submitted-posts prior to 20160215. The vulnerability is described as XSS via the user-submitted-content field in the plugin. The connected documents reiterate the same description across NVD/Red Hat/other listings, with no explicit exploit details ...

CVE-2024-5002

The CVE-2024-5002 entry concerns the WordPress plugin User Submitted Posts (versions before 20240516). The underlying issue is that the plugin does not sanitize and escape certain settings, enabling Stored Cross-Site Scripting by high-privilege users (e.g., administrators), even when unfiltered_h...