CVE-2023-7228

illi Link Party! <= 1.0 - Unauthenticated Stored XSS PUBLISHED

Description (CNA)

The illi Link Party! WordPress plugin through 1.0 does not sanitise and escape some parameters, which could allow unauthenticated vistors to perform Cross-Site Scripting attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / illi Link Party!	affected 0 through 1.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/1ddf1271-3826-44e2-8408-cfbe9c3cc547/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.