Aller au contenu
Se connecter
6.1 Moyenne

CVE-2023-2337 The ConvertKit WordPress plugin before 2.2.1 does not escape a parameter before outputting it back in an attribute,…

Description

The ConvertKit WordPress plugin before 2.2.1 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Produits et versions touchés

Produit Versions touchées Corrigé en
ConvertKit 2.2 premières → < 2.2.1 2.2.1

Autres CVE de ConvertKit

Les 2 CVE de ConvertKit →
CVE-2022-4508 The ConvertKit WordPress plugin before 2.0.5 does not validate and escapes some of its shortcode attributes before… 5.4 Moyenne
Suivre cette CVE