Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Dipakpanchal05

#50204of 53,633
4.8Total CVSS
Vulnerabilities · 1
PT-2023-27530
4.8
2023-09-11
WordPress · Wp Adminify · CVE-2023-4060
**Name of the Vulnerable Software and Affected Versions** WP Adminify WordPress plugin versions prior to 3.1.6 **Description** The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, for example in a multisite setup. The problem arises because some settings are not properly sanitised and escaped. **Recommendations** For WP Adminify WordPress plugin versions prior to 3.1.6, update to version 3.1.6 or later to resolve the issue.