VYPR
Unrated severityNVD Advisory· Published May 15, 2025· Updated May 16, 2025

illi Link Party! <= 1.0 - Admin+ Stored Cross-Site Scripting

CVE-2023-7230

Description

The illi Link Party! WordPress plugin through 1.0 does not sanitize and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.