CVE-2023-0372

MEDIUM 5.4CVE-2023-0372 · Published 21/02/2023 · updated 17/06/2026

In short

CVE-2023-0372 is a MEDIUM (CVSS 5.4) vulnerability affecting embedstories (embedsocial).
Chance of exploitation in the next 30 days (EPSS): 0.46%, higher than 39.8% of all vulnerabilities.
Fix: update to 0.7.5 or later.

Package	Affected versions	Patched versions
embedstories embedsocial	`< 0.7.5`	`0.7.5`

Description

The EmbedStories WordPress plugin before 0.7.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

References

wpscan.com/vulnerability/9cf90ad8-4aa4-466c-a33e-4f2706815765 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free