6.1
Moyenne
CVE-2023-6278 The Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo WordPress plugin before 2.2.25 does not sanitise and…
Description
The Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo WordPress plugin before 2.2.25 does not sanitise and escape the biteship_error and biteship_message parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo 2.2 | premières → < 2.2.25 | 2.2.25 |