The SEO by 10Web WordPress plugin before 1.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2023-06-05T13:39:02.151Z
Updated: 2024-08-02T06:12:20.680Z
Reserved: 2023-04-21T10:24:24.143Z
Link: CVE-2023-2224
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-06-05T14:15:09.977
Modified: 2024-11-21T07:58:11.373
Link: CVE-2023-2224
Redhat
No data.