`CVE-2023-33211`

Medium (CVSS 5.5) Published

WP-Piwik <= 1.0.27 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Display Name

Affected Product: WP-Piwik
Vendor: WordPress Plugin
Published: May 21, 2023
Status: Published

References

Vulnerability Details

WP-Piwik <= 1.0.27 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Display Name

CVE ID: CVE-2023-33211
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Published: May 22, 2023

This vulnerability was discovered through security research on WordPress plugins and responsibly disclosed.