CVE-2023-0542

MEDIO 5.4CVE-2023-0542 · Published 08/05/2023 · updated 17/06/2026

In breve

CVE-2023-0542 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda custom post type list shortcode (blackbirdi).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.44%, superiore al 38.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
custom post type list shortcode blackbirdi	`≤ 1.4.4`	No fix yet

Description

The Custom Post Type List Shortcode WordPress plugin through 1.4.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

References

wpscan.com/vulnerability/17de2f77-3e6c-4c22-9196-6e5577ee7fcf · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free