CVE-2023-0421 (published 2023-05-08T13:58:04.382Z)
The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it in an admin panel, allowing unauthenticated attackers to trick a logged in admin to trigger a XSS payload by clicking a link.
Affected products: Vendor: Unknown
Product: Cloud Manager
Versions: 0