CVE-2023-27415 Auth

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themeqx LetterPress plugin <= 1.1.2 versions.

Affected products and versions

Product	Affected versions	Fixed in
LetterPress 1.1	earliest → 1.1.2	No fix stated

Other CVEs of LetterPress

The 3 CVEs of LetterPress →

CVE-2024-3590 The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to… 6.1 Medium CVE-2024-34568 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeqx… 5.9 Medium