Security Advisory

CVE-2023-0420

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-04-24 18:30:49

Last updated 2025-02-04 18:44:24

Assigner WPScan

State PUBLISHED

Description

The Custom Post Type and Taxonomy GUI Manager WordPress plugin through 1.1 does not have CSRF, and is lacking sanitising as well as escaping in some parameters, allowing attackers to make a logged in admin put Stored Cross-Site Scripting payloads via CSRF

← Browse all CVEs View on cve.org ↗