VYPR

Advanced Custom Fields Extended

by Acfextended

Source repositories

CVEs (1)

  • CVE-2023-5292MedOct 20, 2023
    risk 0.35cvss 6.4epss 0.00

    The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'acfe_form' shortcode in versions up to, and including, 0.8.9.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…