Stored Cross-Site Scripting in Solidres Plugin for WordPress
CVE-2023-1374
4.8MEDIUM
Key Information:
- Vendor
Wordpress
- Vendor
- CVE Published:
- 13 March 2023
What is CVE-2023-1374?
The Solidres plugin for WordPress is susceptible to Stored Cross-Site Scripting (XSS) through the 'currency_name' parameter due to inadequate input sanitization and output escaping practices. This vulnerability allows authenticated attackers with administrative privileges to inject malicious web scripts. The injected scripts can execute on user-accessed pages, posing a significant threat to site integrity and user data security.
Affected Version(s)
Solidres – Hotel booking plugin for WordPress * <= 0.9.4