Unrated severityNVD Advisory· Published Aug 30, 2023· Updated Oct 1, 2024
Subscribers Text Counter < 1.7.1 - Settings Update via CSRF to Stored XSS
CVE-2023-3356
Description
The Subscribers Text Counter WordPress plugin before 1.7.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, which also lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<1.7.1+ 1 more
- (no CPE)range: <1.7.1
- (no CPE)range: <1.7.1
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/93faad5b-e1e8-4e49-b19e-b91343d68b51mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.