← All advisories

High severity7.1NVD Advisory· Published Sep 4, 2023· Updated Jun 17, 2026

CVE-2023-31220

CVE-2023-31220

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP-EXPERTS.IN TEAM WP Categories Widget plugin <= 2.2 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Wp Experts/Wp Categories Widget
cpe:2.3:a:wp-experts:wp-categories-widget:*:*:*:*:*:wordpress:*:*
Range: <=2.2
WordPress/WP Categories Widgetllm-fuzzy
Range: <=2.2
WP-EXPERTS.IN TEAM/WP Categories Widgetv5
Range: n/a

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/wp-categories-widget/wordpress-wp-categories-widget-plugin-2-2-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.