VULNERABILITY INTELLIGENCE

CVE-2023-7084

CVSS score5.4 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2024-01-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

The Voting Record WordPress plugin through 2.0 is missing sanitisation as well as escaping, which could allow any authenticated users, such as subscriber to perform Stored XSS attacks

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references