National Cyber Warfare Foundation (NCWF)

CVE-2023-3746 (activitypub)

0 user ratings

2023-10-18 18:11:19
milo
CVEs
- archive --

The ActivityPub WordPress plugin before 1.0.0 does not sanitize and escape some data from post content, which could allow contributor and above role to perform Stored Cross-Site Scripting attacks

CVE-2023-3746 (activitypub)
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3746
The ActivityPub WordPress plugin before 1.0.0 does not sanitize and escape some data from post content, which could allow contributor and above role to perform Stored Cross-Site Scripting attacks
2023-10-16T20:15:15Z

Source: CVEAnnouncements
Source Link: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3746

Comments	new comment
Nobody has commented yet. Will you be the first?

Forum

CVEs

CVE-2023-3746 (activitypub)

Comments