URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress, CVE-2023-4294

CVE, Research URL: CVE-2023-4294
Home page URL: Security reports for URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress
Application: URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress
Published on: Sep 12, 2023
Research Description: The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short link.
Affected versions: Min -, max 1.7.6.
Status: vulnerable

URL Shortify &#8211; Simple, Powerful and Easy URL Shortener Plugin For WordPress, CVE-2023-4294