The Responsive Pricing Table WordPress plugin before 5.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2023-11-06T20:41:11.175Z

Updated: 2024-08-02T07:38:00.640Z

Reserved: 2023-09-06T17:23:39.116Z

Link: CVE-2023-4810

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-11-06T21:15:08.900

Modified: 2024-11-21T08:36:01.067

Link: CVE-2023-4810

cve-icon Redhat

No data.