CVE-2023-1323
Assigner: WPScan
Published: 2023-06-12T17:28:21.059Z
State: PUBLISHED
title: Easy Forms for MailChimp < 6.8.9 - Admin+ Stored XSS
problemTypes: descriptions: description: CWE-79 Cross-Site Scripting (XSS)
type: CWE
affected: vendor: Unknown
product: Easy Forms for Mailchimp
versions: status: affected
versionType: custom
version: 0
lessThan: 6.8.9
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
descriptions: value: The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape some of its from parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
credits: value: Chau Nguyen
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator