0xn4d/poc-cve-xss-encoded-wp-inventory-manager-plugin

0xn4d/poc-cve-xss-encoded-wp-inventory-manager-plugin

GitHubGitHub
GitHubgithub.com
wpscan.comwpscan.com
Releases0
Stars2
PoC for CVE-2023-2123
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-2123↗
6.1 MEDIUM—

The WP Inventory Manager WordPress plugin before 2.1.0.13 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.