The WP Shopping Pages WordPress plugin through 1.14 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: WPScan
Published: 2023-08-07T14:31:19.856Z
Updated: 2024-08-02T06:55:03.585Z
Reserved: 2023-06-30T21:14:26.517Z
Link: CVE-2023-3492

No data.

Status : Modified
Published: 2023-08-07T15:15:11.280
Modified: 2024-11-21T08:17:23.200
Link: CVE-2023-3492

No data.