CVE-2023-23874 Auth

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Metaphor Creations Ditty plugin <= 3.0.32 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Ditty 3.0	premières → 3.0.32	Pas de correctif indiqué

Autres CVE de Ditty

Les 4 CVE de Ditty →

CVE-2026-93339 Metaphor Creations Ditty (ditty-news-ticker) before 3.1.70 contains a stored cross-site scripting vulnerability that… 5.1 Moyenne CVE-2023-47764 Missing Authorization vulnerability in metaphorcreations Ditty ditty-news-ticker allows Exploiting Incorrectly… 6.5 Moyenne CVE-2024-32569 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metaphor Creations… 6.5 Moyenne