VYPR

Wplegalpages

by Wpeka

CVEs (1)

  • CVE-2023-4968MedOct 20, 2023
    risk 0.29cvss 5.5epss 0.00

    The WPLegalPages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wplegalpage' shortcode in versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated…