High severity7.2NVD Advisory· Published Jun 8, 2026· Updated Jun 8, 2026
CVE-2023-54351
CVE-2023-54351
Description
WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the comment functionality. Attackers can submit JavaScript payloads in the comment parameter to wp-comments-post.php which are stored and executed in the browsers of users viewing the affected playlist pages.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=4.7+ 1 more
- (no CPE)range: <=4.7
- (no CPE)range: <4.7
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.