CVE-2023-2123

CVE-2023-2123: vulnerability in WP Inventory Manager

WP Inventory Manager < 2.1.0.13 - Reflected Cross-Site Scripting

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
The WP Inventory Manager WordPress plugin before 2.1.0.13 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.