The WP EasyPay WordPress plugin before 4.1 does not escape some generated URLs before outputting them back in pages, leading to Reflected Cross-Site Scripting issues which could be used against high privilege users such as admin
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2023-08-16T11:03:27.810Z

Updated: 2024-08-02T05:49:11.359Z

Reserved: 2023-03-17T11:21:32.215Z

Link: CVE-2023-1465

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-08-16T12:15:12.420

Modified: 2024-11-21T07:39:14.780

Link: CVE-2023-1465

cve-icon Redhat

No data.