cleantalk
Vulnerabilities and Security Researches

WP Inventory Manager, CVE-2023-2123

CVE, Research URL

CVE-2023-2123

Application

WP Inventory Manager

Published on
Aug 16, 2023
Research Description
The WP Inventory Manager WordPress plugin before 2.1.0.13 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.
Affected versions
max 2.1.0.13.
Status
vulnerable