6.5
Medium
CVE-2023-38516 Auth
Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP OnlineSupport, Essential Plugin Audio Player with Playlist Ultimate plugin <= 1.2.2 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Audio Player with Playlist Ultimate 1.2 | earliest → 1.2.2 | No fix stated |