PT-2023-17422
CVE-2023-2026
·
تاريخ النشر
2023-07-10
·
تاريخ التحديث
2023-07-14
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Image Protector WordPress plugin versions 1.1 and earlier
Description
The issue allows high-privilege users to perform Stored Cross-Site Scripting (XSS) attacks due to improper sanitization of some settings, even when the unfiltered html capability is disallowed, such as in multisite setups.
Recommendations
For Image Protector WordPress plugin versions 1.1 and earlier, update to a version that properly sanitizes its settings to prevent Stored Cross-Site Scripting (XSS) attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾