CVE-2023-33693
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Jun 5, 2023
Updated: Jan 8, 2025
CWE ID 787
Summary
CVE-2023-2224 is a vulnerability affecting the SEO by 10Web WordPress plugin before version 1.2.7. Despite the unfiltered_html capability being disabled in some configurations, this issue fails to sanitize and escape certain settings. Consequently, high privilege users, including admins in multisite setups, can execute Stored Cross-Site Scripting attacks. This vulnerability can potentially lead to unauthorized access or data manipulation within the WordPress environment.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.