CVE-2023-40667

概要

参考情報

• patchstack.com/database/vulnerability/simple-urls/wordpress-simple-urls-plugin-117-cross-site-scripting-xss-vulnerability · Third Party Advisory

simple urls のその他の脆弱性

• CVE-2023-40674中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lasso Simple URLs – Link Cloaking, Pro…
• CVE-2023-45606高 8.8Cross-Site Request Forgery (CSRF) vulnerability in Lasso Simple URLs plugin <= 120 versions.
• CVE-2023-0099中 6.1The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading …
• CVE-2023-0098高 8.8The Simple URLs WordPress plugin before 115 does not escape some parameters before using them in various SQL statements used by AJAX actions…