← All advisories

Medium severity5.9NVD Advisory· Published Apr 6, 2023· Updated Jun 17, 2026

CVE-2023-24001

CVE-2023-24001

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yannick Lefebvre Modal Dialog plugin <= 3.5.9 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Ylefebvre/Modal Dialog
cpe:2.3:a:ylefebvre:modal_dialog:*:*:*:*:*:wordpress:*:*
Range: <3.5.10
Community Events Project/Modal Dialogllm-create2 versions
<=3.5.9+ 1 more
- (no CPE)range: <=3.5.9
- (no CPE)range: n/a
WordPress/Modal Dialogllm-fuzzy
Range: <=3.5.9

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/modal-dialog/wordpress-modal-dialog-plugin-3-5-9-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.