6.5
Moyenne
CVE-2023-23820 Auth
Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team ProfilePress plugin <= 4.5.4 versions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ProfilePress 4.5 | premières → 4.5.4 | Pas de correctif indiqué |
Autres CVE de ProfilePress
Les 6 CVE de ProfilePress →
CVE-2023-41953
Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from…
5.3
Moyenne
CVE-2023-50882
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly…
5.3
Moyenne
CVE-2023-41954
Improper Privilege Management vulnerability in ProfilePress Membership Team ProfilePress allows Privilege…
8.6
Élevée
CVE-2023-23830
Unauth
7.1
Élevée