CVE-2023-27413

概要

参考情報

• patchstack.com/database/vulnerability/w4-post-list/wordpress-w4-post-list-plugin-2-4-2-cross-site-scripting-xss-vulnerability · Third Party Advisory

w4 post list のその他の脆弱性

• CVE-2023-1373中 6.1The W4 Post List WordPress plugin before 2.4.6 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Si…
• CVE-2023-1371中 6.5The W4 Post List WordPress plugin before 2.4.6 does not ensure that password protected posts can be accessed before displaying their content…
• CVE-2023-0374中 5.4The W4 Post List WordPress plugin before 2.4.6 does not validate and escape some of its block options before outputting them back in a page/…