CVE Database /
CVE-2023-46310
CVE · Medium
CVE-2023-46310 — Comments – wpDiscuz [wpdiscuz] < 7.6.11
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-46310
|
Comments – wpDiscuz [wpdiscuz] < 7.6.11 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) |
Medium
5.3
|
< 7.6.11
|
7.6.11 |
2023-10-22 |
—
|
CVE-2023-46310
The wpDiscuz plugin before version 7.6.11 contains a content injection flaw that could enable an attacker to insert arbitrary content into website pages and posts, potentially including malicious or phishing material. This vulnerability was identified by Revan Arifio and has been resolved in version 7.6.11 and later. Users should upgrade their plugin installation to version 7.6.11 or newer to eliminate this risk.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings