0xn4d/poc-cve-xss-inventory-press-plugin

0xn4d/poc-cve-xss-inventory-press-plugin

GitHubGitHub
GitHubgithub.com
Releases0
PoC for CVE-2023-2579
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-2579↗
5.4 MEDIUM—

The InventoryPress WordPress plugin through 1.7 does not sanitise and escape some of its settings, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks.