Aller au contenu
Se connecter
5.4 Moyenne

CVE-2023-0081 The MonsterInsights WordPress plugin before 8.12.1 does not validate and escape some of its block options before…

Description

The MonsterInsights WordPress plugin before 8.12.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Produits et versions touchés

Produit Versions touchées Corrigé en
MonsterInsights 8.12 premières → < 8.12.1 8.12.1

Autres CVE de MonsterInsights

Les 3 CVE de MonsterInsights →
CVE-2026-11366 The MonsterInsights WordPress plugin before 11.1.0 does not correctly validate the signature on one of its… 3.7 Faible CVE-2022-3904 The MonsterInsights WordPress plugin before 8.9.1 does not sanitize or escape page titles in the top posts/pages… 6.1 Moyenne
Suivre cette CVE