CVE Database /
CVE-2023-6994
CVE · Medium
CVE-2023-6994 — List category posts [list-category-posts] < 0.89.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-6994
|
List category posts [list-category-posts] < 0.89.4 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 0.89.4
|
0.89.4 |
2024-01-09 |
—
|
CVE-2023-6994
The List category posts plugin before version 0.89.4 contains a cross-site scripting vulnerability discovered by Ngô Thiên An that could permit attackers to insert harmful code into websites, potentially leading to malicious redirects, injected advertisements, and arbitrary HTML execution when visitors access the site. The flaw was patched in version 0.89.4, making it necessary for users to upgrade to this version or newer to eliminate the risk.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings