Low severity3.5NVD Advisory· Published Dec 29, 2023· Updated Jun 17, 2026

CVE-2023-7149

Description

A vulnerability was found in code-projects QR Code Generator 1.0. It has been classified as problematic. This affects an unknown part of the file /download.php?file=author.png. The manipulation of the argument file with the input "> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249153 was assigned to this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Code Generatorllm-fuzzy
Range: = 1.0
Package: https://wordpress.org/plugins/code-generator
code-projects/QR Code Generatorv5
Range: 1.0

Patches

Vulnerability mechanics

References

github.com/h4md153v63n/CVEs/blob/main/QR_Code_Generator/QR_Code_Generator-Reflected_Cross_Site_Scripting.mdnvdExploit
vuldb.comnvdThird Party Advisory
vuldb.comnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000