URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress, CVE-2023-3129

CVE, Research URL: CVE-2023-3129
Home page URL: Security reports for URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress
Application: URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress
Published on: Jul 10, 2023
Research Description: The URL Shortify WordPress plugin before 1.7.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Affected versions: Min -, max 1.7.4.
Status: vulnerable

URL Shortify &#8211; Simple, Powerful and Easy URL Shortener Plugin For WordPress, CVE-2023-3129