6.5
Medium
CVE-2023-23820 Auth
Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.4 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ProfilePress 4.5 | earliest → 4.5.4 | No fix stated |
Other CVEs of ProfilePress
The 6 CVEs of ProfilePress →
CVE-2023-41953
Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from…
5.3
Medium
CVE-2023-50882
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly…
5.3
Medium
CVE-2023-41954
Improper Privilege Management vulnerability in ProfilePress Membership Team ProfilePress allows Privilege…
8.6
High
CVE-2023-23830
Unauth
7.1
High