CVE-2023-1982 | BDVDB-2026-210641 Detail

Guest posting / Frontend Posting wordpress plugin

Description#

The Front Editor WordPress plugin through 4.0.4 does not sanitize and escape some of its form settings, which could allow high-privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/51987966-8007-4e12-bc2e-997b92054739

Exploit#

https://wpscan.com/vulnerability/51987966-8007-4e12-bc2e-997b92054739

History#

Version 12023-08-30Record published in the CVE List.
Version 22024-10-01Most recent update recorded in the CVE List.