The Elementor Forms Google Sheet... CVE-2023-2324

- AV AC AU C I A
发布: 2023-07-04
修订: 2023-11-07

The Elementor Forms Google Sheet Connector WordPress plugin before 1.0.7, gsheetconnector-for-elementor-forms-pro WordPress plugin through 1.0.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

0%
暂无可用Exp或PoC
当前有2条受影响产品信息