5.9
Medium
CVE-2023-31228 Auth
Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CM On Demand Search And Replace 1.3 | earliest → 1.3.0 | No fix stated |
Other CVEs of CM On Demand Search And Replace
The 5 CVEs of CM On Demand Search And Replace →
CVE-2025-54045
Missing Authorization vulnerability in CreativeMindsSolutions CM On Demand Search And Replace…
4.3
Medium
CVE-2025-54727
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…
5.9
Medium
CVE-2025-54728
Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace…
4.3
Medium
CVE-2023-28749
Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace…
4.3
Medium