Lucene search
PRIOn knowledge basePRION:CVE-2023-1323HistoryJun 12, 2023 - 6:15 p.m.
Cross site scripting
2023-06-1218:15:00
PRIOn knowledge base
www.prio-n.com
6
mailchimp
wordpress
vulnerability
stored cross-site scripting
high privilege users
admin
unfiltered_html capability
multisite setup
0.0005 Low
EPSS
Percentile
18.3%
The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape some of its from parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
| CPE | Name | Operator | Version |
|---|---|---|---|
| easy_forms_for_mailchimp | lt | 6.8.9 |
Related
osv
osv
CVE-2023-1323
2023-06-12 18:15:09
wpvulndb
wpvulndb
Easy Forms for MailChimp < 6.8.9 - Admin+ Stored XSS
2023-03-09 00:00:00
cvelist
cvelist
CVE-2023-1323 Easy Forms for MailChimp < 6.8.9 - Admin+ Stored XSS
2023-06-12 17:28:21
cve
cve
CVE-2023-1323
2023-06-12 18:15:09
nvd
nvd
CVE-2023-1323
2023-06-12 18:15:09
wpexploit
wpexploit
Easy Forms for MailChimp < 6.8.9 - Admin+ Stored XSS
2023-03-09 00:00:00
openvas
openvas
WordPress Easy Forms for Mailchimp Plugin < 6.8.9 Multiple Vulnerability
2023-06-16 00:00:00