CVE Database /
CVE-2023-23891
CVE · Medium
CVE-2023-23891 — Ocean Extra [ocean-extra] < 2.1.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-23891
|
Ocean Extra [ocean-extra] < 2.1.3 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.5
|
< 2.1.3
|
2.1.3 |
2023-02-01 |
—
|
CVE-2023-23891
The Ocean Extra WordPress plugin versions before 2.1.3 contain a cross-site scripting flaw that was discovered by Rafshanzani Suhada. An attacker could exploit this vulnerability to inject harmful scripts into a website, enabling execution of malicious code such as redirects, advertisements, or arbitrary HTML when visitors access the site. The vulnerability was patched in version 2.1.2 and users should upgrade to at least that version or later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings