CVE-2023-4798
16.10.2023, 20:15
The User Avatar WordPress plugin before 1.2.2 does not properly sanitize and escape certain of its shortcodes attributes, which could allow relatively low-privileged users like contributors to conduct Stored XSS attacks.Enginsight
| Vendor | Product | Version |
|---|---|---|
| wpexperts | user_avatar-reloaded | 𝑥 < 1.2.2 |
𝑥
= Vulnerable software versions