Skip to content
Sign in
6.1 Medium

CVE-2023-1377 The Solidres WordPress plugin through 0.9.4 does not sanitise and escape numerous parameter before outputting them…

Description

The Solidres WordPress plugin through 0.9.4 does not sanitise and escape numerous parameter before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Affected products and versions

Product Affected versions Fixed in
Solidres 0.9 earliest → 0.9.4 No fix stated

Other CVEs of Solidres

The 2 CVEs of Solidres →
CVE-2024-13329 The Solidres WordPress plugin through 0.9.4 does not sanitise and escape a parameter before outputting it back in the… 7.1 High
Track this CVE