Non évaluée

WP ERP < 1.12.4 - Reflected Cross-Site Scripting

CVE-2023-2743 Première détection SecPulse Jun 27, 2023

Description d'origine La description telle que publiée par la source (souvent en anglais).

The ERP WordPress plugin before 1.12.4 does not sanitise and escape the employee_name parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
report wpscan.com
web wordpress.org

Faits clés

Gravité: Non évaluée
Publication: Jun 27, 2023
Première détection SecPulse: Jun 27, 2023

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:58