Unrated severityNVD Advisory· Published Apr 17, 2023· Updated Apr 23, 2025
WP VR < 8.2.9 - Reflected XSS
CVE-2023-1413
Description
The WP VR WordPress plugin before 8.2.9 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/WP VRdescription
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/6938fee5-3510-45e6-8112-c9e2b30f6881mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.