Not rated
CVE-2023-2579 The InventoryPress WordPress plugin through 1.7 does not sanitise and escape some of its settings, which could allow…
Description
The InventoryPress WordPress plugin through 1.7 does not sanitise and escape some of its settings, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| InventoryPress 1.7 | earliest → 1.7 | No fix stated |