CVE-2023-27413

Description

References

• patchstack.com/database/vulnerability/w4-post-list/wordpress-w4-post-list-plugin-2-4-2-cross-site-scripting-xss-vulnerability · Third Party Advisory

Weitere Schwachstellen in w4 post list

• CVE-2023-1373MITTEL 6.1The W4 Post List WordPress plugin before 2.4.6 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Si…
• CVE-2023-1371MITTEL 6.5The W4 Post List WordPress plugin before 2.4.6 does not ensure that password protected posts can be accessed before displaying their content…
• CVE-2023-0374MITTEL 5.4The W4 Post List WordPress plugin before 2.4.6 does not validate and escape some of its block options before outputting them back in a page/…