CVE-2023-54351

Name of the Vulnerable Software and Affected Versions Sonaar Music Plugin version 4.7

Description A stored cross-site scripting issue exists in the comment functionality. Unauthenticated attackers can inject malicious scripts by submitting JavaScript payloads via the comment parameter to the 'wp-comments-post.php' endpoint. These scripts are stored and subsequently executed in the browsers of users who view the affected playlist pages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.