CVE Database /
CVE-2023-4968
CVE · Medium
CVE-2023-4968 — Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages [wplegalpages] < 2.9.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-4968
|
Privacy Policy Generator, Terms & Conditions, GDPR, CCPA, Cookie Policy & Disclaimer Templates – WPLP Legal Pages [wplegalpages] < 2.9.3 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
4.8
|
< 2.9.3
|
2.9.3 |
2023-10-10 |
—
|
CVE-2023-4968
The WPLegalPages plugin before version 2.9.3 contains a cross-site scripting vulnerability that could permit attackers to inject harmful scripts into websites, potentially leading to execution of malicious code when visitors access the site. Such injected content could include redirects, advertisements, or other HTML payloads designed to compromise the website's integrity. The vulnerability was identified by Lana Codes and has been resolved in version 2.9.3 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings