`CVE-2023-25488`

Medium (CVSS 5.5) Published

WP Default Feature Image <= 1.0.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Affected Product: WP Default Feature Image
Vendor: WordPress Plugin
Published: July 9, 2023
Status: Published

References

Vulnerability Details

WP Default Feature Image <= 1.0.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

CVE ID: CVE-2023-25488
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Published: July 10, 2023

This vulnerability was discovered through security research on WordPress plugins and responsibly disclosed.