The SEOPress WordPress plugin before 7.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2024-01-22T19:14:26.723Z

Updated: 2024-08-29T14:31:11.952Z

Reserved: 2023-11-24T17:02:02.306Z

Link: CVE-2023-6290

cve-icon Vulnrichment

Updated: 2024-08-02T08:28:21.380Z

cve-icon NVD

Status : Modified

Published: 2024-01-22T20:15:47.457

Modified: 2024-11-21T08:43:32.380

Link: CVE-2023-6290

cve-icon Redhat

No data.