← CVE Intelligence

CVE-2023-0420

Custom Post Type and Taxonomy GUI Manager <= 1.1 - Stored XSS via CSRF PUBLISHED

Description (CNA)

The Custom Post Type and Taxonomy GUI Manager WordPress plugin through 1.1 does not have CSRF, and is lacking sanitising as well as escaping in some parameters, allowing attackers to make a logged in admin put Stored Cross-Site Scripting payloads via CSRF

Affected (CNA)

Vendor / productVersions
Unknown / Custom Post Type and Taxonomy GUI Manageraffected 0 through 1.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.