WordPress Plugin Vulnerabilities

ProfilePress < 4.5.5 - Contributor+ Stored XSS

Description

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Affects Plugins

Plugin icon
wp-user-avatar
Fixed in 4.5.5

References

CVE
CVE-2023-23820

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.8 (medium)

Miscellaneous

Original Researcher
Rafie Muhammad
Verified
No
WPVDB ID
effe591a-8453-48f8-afec-421b4e610615

Timeline

Publicly Published
2023-02-20 (about 3 years ago)
Added
2023-05-04 (about 3 years ago)
Last Updated
2023-05-04 (about 3 years ago)

Other

Published
Title
Published
2025-06-05
Title
The Holiday Calendar <= 1.18.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-04-29
Title
MailerLite – Signup forms (official) 1.5.0 - 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-11-08
Title
WP Virtual Room Configurator <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-09-25
Title
Poll Maker < 4.7.1 - Reflected XSS
Published
2024-07-08
Title
Squelch Tabs and Accordions Shortcodes < 0.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via tab Shortcode