CVE-2023-0421

The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it in an admin panel, allowing unauthenticated attackers to trick a logged in admin to trigger a XSS payload by clicking a link.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:cloud_manager_project:cloud_manager:*:*:*:*:*:wordpress:*:*

History

07 Nov 2023, 04:00

Type Values Removed Values Added
CWE CWE-79

Information

Published : 2023-05-08 14:15

Updated : 2024-02-28 20:13


NVD link : CVE-2023-0421

Mitre link : CVE-2023-0421

CVE.ORG link : CVE-2023-0421


JSON object : View

Products Affected

cloud_manager_project

  • cloud_manager
CWE

No CWE.