cleantalk
Vulnerabilities and Security Researches

wpForo Forum, CVE-2023-2309

CVE, Research URL

CVE-2023-2309

Application

wpForo Forum

Published on
Jul 24, 2023
Research Description
The wpForo Forum WordPress plugin before 2.1.9 does not escape some request parameters while in debug mode, leading to a Reflected Cross-Site Scripting vulnerability.
Affected versions
Min -, max 2.1.9.
Status
vulnerable