Security Advisory

CVE-2023-5620

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-11-27 16:22:07

Last updated 2024-08-02 08:07:32

Assigner WPScan

State PUBLISHED

Description

The Web Push Notifications WordPress plugin before 4.35.0 does not prevent visitors on the site from changing some of the plugin options, some of which may be used to conduct Stored XSS attacks.

← Browse all CVEs View on cve.org ↗