VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Apr 17, 2023· Updated Jun 17, 2026

CVE-2023-1413

CVE-2023-1413

Description

The WP VR WordPress plugin before 8.2.9 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Rextheme/Wp VR
    cpe:2.3:a:rextheme:wp_vr:*:*:*:*:*:wordpress:*:*
    Range: <8.2.9
  • WordPress/WP VRdescription
  • WordPress/WP VRllm-fuzzy
    Range: <8.2.9

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.