CVE-2023-3746 — ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS

CVE-2023-3746

ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS PUBLISHED

Description (CNA)

The ActivityPub WordPress plugin before 1.0.0 does not sanitize and escape some data from post content, which could allow contributor and above role to perform Stored Cross-Site Scripting attacks

Affected (CNA)

Vendor / product	Versions
Unknown / ActivityPub	affected 0 before 1.0.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/c15a6032-6495-47a8-828c-37e55ed9665a

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/c15a6032-6495-47a8-828c-37e55ed9665a

CISA-ADP

No English description supplied.

No references supplied.