CVE-2023-5211 — Fattura24 < 6.2.8 - Reflected Cross-Site Scripting

CVE-2023-5211

Fattura24 < 6.2.8 - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The Fattura24 WordPress plugin before 6.2.8 does not sanitize or escape the 'id' parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting vulnerability.

Affected (CNA)

Vendor / product	Versions
Unknown / Fattura24	affected 0 before 6.2.8

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/aa868380-cda7-4ec6-8a3f-d9fa692908f2

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/aa868380-cda7-4ec6-8a3f-d9fa692908f2

CISA-ADP

No English description supplied.

No references supplied.