CVE-2023-5211 (published 2023-10-31T13:54:45.520Z)
The Fattura24 WordPress plugin before 6.2.8 does not sanitize or escape the 'id' parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting vulnerability.
Affected products: Vendor: Unknown
Product: Fattura24
Versions: 0