`CVE-2023-24372`

Medium (CVSS 5.5) Published

Simple Custom Author Profiles <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Affected Product: Simple Custom Author Profiles
Vendor: WordPress Plugin
Published: March 20, 2023
Status: Published

References

Vulnerability Details

Simple Custom Author Profiles <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

CVE ID: CVE-2023-24372
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Published: March 21, 2023

This vulnerability was discovered through security research on WordPress plugins and responsibly disclosed.