5.4
CVSSv3

CVE-2023-0233

Published: 15/05/2023 Updated: 07/11/2023
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0

Vulnerability Summary

The ActiveCampaign WordPress plugin prior to 8.1.12 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

activecampaign activecampaign