CVE-2023-23972
Published Apr 6, 2023Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin <= 0.8.39 versions.
Vendor/product archive
2 CVEs tagged to wpdevart / social_like_box_and_page — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin <= 0.8.39 versions.
The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some of its shortcode attributes before outputting them back in a page/post wh…