Beveiligingsadvies

CVE-2023-0442

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-02-21 08:51:06

Laatst bijgewerkt 2025-03-12 13:27:36

Toegewezen door WPScan

CVSS-score 6.1

Status PUBLISHED

Beschrijving

The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its query parameters before outputting them back in a page/post via an embedded shortcode, which could allow an attacker to inject javascript into into the site via a crafted URL.

← Alle CVE's bekijken Bekijk op cve.org ↗