Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor, CVE-2023-1982
- CVE, Research URL
- Home page URL
- Application
-
Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor
- Published on
- Aug 30, 2023
- Research Description
- The Front Editor WordPress plugin through 4.0.4 does not sanitize and escape some of its form settings, which could allow high-privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
- Affected versions
-
Min -, max 4.0.4.
- Status
-
vulnerable