cleantalk
Vulnerabilities and Security Researches

Twittee Text Tweet, CVE-2023-0602

CVE, Research URL

CVE-2023-0602

Application

Twittee Text Tweet

Published on
Jul 31, 2023
Research Description
The Twittee Text Tweet WordPress plugin through 1.0.8 does not properly escape POST values which are printed back to the user inside one of the plugin's administrative page, which allows reflected XSS attacks targeting administrators to happen.
Affected versions
max 1.0.8.
Status
vulnerable