CVE-2023-1982 in WP Front User Submit Plugininfo

Summary

by MITRE • 08/30/2023

The Front Editor WordPress plugin through 4.0.4 does not sanitize and escape some of its form settings, which could allow high-privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

04/11/2023

Disclosure

08/30/2023

Moderation

accepted

CPE

ready

EPSS

0.00117

KEV

no

Activities

very low

Sources

Want to know what is going to be exploited?

We predict KEV entries!