CVE-2023-40330 Unauth

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Milan Petrovic GD Security Headers plugin <= 1.6.1 versions.

Affected products and versions

Product	Affected versions	Fixed in
GD Security Headers 1.6	earliest → 1.6.1	No fix stated

Other CVEs of GD Security Headers

The 3 CVEs of GD Security Headers →

CVE-2026-57403 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic… 7.1 High CVE-2023-46821 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic… 7.6 High