VYPR
Unrated severityNVD Advisory· Published Jul 31, 2023· Updated Aug 2, 2024

Twittee Text Tweet <= 1.0.8 - Reflected XSS

CVE-2023-0602

Description

The Twittee Text Tweet WordPress plugin through 1.0.8 does not properly escape POST values which are printed back to the user inside one of the plugin's administrative page, which allows reflected XSS attacks targeting administrators to happen.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.