Lucene search
CM Answers < 3.2.0 - Admin+ Stored XSS
CM Answers < 3.2.0 - Admin+ Stored XSS. Plugin settings not properly sanitized, allowing admin privilege XSS attacks despite unfiltered_html capability disallowance in multisite setup
Show more
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | WordPress CM Answers Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS) | 23 Feb 202300:00 | – | patchstack |
 | CVE-2023-25992 WordPress CM Answers Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS) | 23 Mar 202316:18 | – | vulnrichment |
 | CVE-2023-25992 WordPress CM Answers Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS) | 23 Mar 202316:18 | – | cvelist |
 | Cross site scripting | 23 Mar 202317:15 | – | prion |
 | CVE-2023-25992 | 23 Mar 202317:15 | – | nvd |
 | CVE-2023-25992 | 23 Mar 202317:15 | – | cve |
 | Wordfence Intelligence Weekly WordPress Vulnerability Report (Feb 20, 2023 to Feb 26, 2023) | 2 Mar 202314:49 | – | wordfence |
Node
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo23 Feb 2023 00:00Current
4.8Medium risk
Vulners AI Score4.8
EPSS0.001