The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape various parameters before outputting them back in admin dashboard pages, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/60226669-0b7b-441f-93d4-b5933e69478f | Exploit Third Party Advisory |
Configurations
History
07 Nov 2023, 04:12
Type | Values Removed | Values Added |
---|---|---|
CWE |
09 Jun 2023, 22:49
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:trumani:stop_spammers:*:*:*:*:*:wordpress:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
First Time |
Trumani
Trumani stop Spammers |
|
References | (MISC) https://wpscan.com/vulnerability/60226669-0b7b-441f-93d4-b5933e69478f - Exploit, Third Party Advisory |
05 Jun 2023, 14:22
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-06-05 14:15
Updated : 2024-02-28 20:13
NVD link : CVE-2023-2488
Mitre link : CVE-2023-2488
CVE.ORG link : CVE-2023-2488
JSON object : View
Products Affected
trumani
- stop_spammers
CWE
No CWE.