Skip to content
Sign in
6.1 Medium

CVE-2023-2488 The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape…

Description

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape various parameters before outputting them back in admin dashboard pages, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Affected products and versions

Product Affected versions Fixed in
Stop Spammers Security | Block Spam Users, Comments, Forms 2023 earliest → < 2023 2023

Other CVEs of Stop Spammers Security | Block Spam Users, Comments, Forms

The 4 CVEs of Stop Spammers Security | Block Spam Users, Comments, Forms →
CVE-2023-2489 The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape… 4.8 Medium CVE-2022-4120 The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2022.6 passes base64 encoded user… 9.8 Critical CVE-2021-24517 The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2021.18 does not escape some of… Not rated
Track this CVE