CVE-2023-23874 Auth

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Metaphor Creations Ditty plugin <= 3.0.32 versions.

Affected products and versions

Product	Affected versions	Fixed in
Ditty 3.0	earliest → 3.0.32	No fix stated

Other CVEs of Ditty

The 4 CVEs of Ditty →

CVE-2026-93339 Metaphor Creations Ditty (ditty-news-ticker) before 3.1.70 contains a stored cross-site scripting vulnerability that… 5.1 Medium CVE-2023-47764 Missing Authorization vulnerability in metaphorcreations Ditty ditty-news-ticker allows Exploiting Incorrectly… 6.5 Medium CVE-2024-32569 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metaphor Creations… 6.5 Medium