5.4
CVSSv3

CVE-2023-0424

Published: 24/04/2023 Updated: 07/11/2023
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0

Vulnerability Summary

The MS-Reviews WordPress plugin up to and including 1.5 does not sanitise and escape reviews, which could allow users any authenticated users, such as Subscribers to perform Stored Cross-Site Scripting attacks

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ms-reviews project ms-reviews