CVE Database /
CVE-2023-2433
CVE · Medium
CVE-2023-2433 — YARPP – Yet Another Related Posts Plugin [yet-another-related-posts-plugin] < 5.30.4 (closed)
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-2433
|
YARPP – Yet Another Related Posts Plugin [yet-another-related-posts-plugin] < 5.30.4 (closed) |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 5.30.4
|
5.30.4 |
2023-07-17 |
—
|
CVE-2023-2433
The YARPP plugin for WordPress versions before 5.30.4 contains a cross-site scripting flaw that could enable attackers to embed malicious code into web pages, potentially executing redirects, injecting advertisements, or running arbitrary HTML when visitors access the site. Lana Codes identified and disclosed this vulnerability, which has been resolved in version 5.30.4 and later releases.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings