← voltar
CVE-2023-2029

PrePost SEO <= 3.0 - Admin+ Stored Cross-Site Scripting

EPSS 0.6%
The PrePost SEO WordPress plugin through 3.0 does not properly sanitize some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting (XSS) attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Produtos afetados
Unknown · PrePost SEO

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →