5.4
Moyenne
CVE-2023-7246 The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameters, which could allow…
Description
The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameters, which could allow administrators in multisite WordPress configurations to perform Cross-Site Scripting attacks
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| System Dashboard 2.8 | premières → < 2.8.10 | 2.8.10 |
| system_dashboard 2.8 | premières → < 2.8.10 | 2.8.10 |