webfactory WordPress Charts vulnerabilities (CVE)

CVE records published for webfactory WordPress Charts, newest first. Follow to get an email when a new one appears.

1 results

6.4Medium

CVE-2023-5062 3 years ago

WordPress Charts <= 0.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

webfactory WordPress Charts

The WordPress Charts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wp_charts' shortcode in versions up to, and including, 0.7.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it poss…