Vulnerabilities > Wpeka > Wplegalpages > 2.9.2
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-10-20 | CVE-2023-4968 | Cross-site Scripting vulnerability in Wpeka Wplegalpages The WPLegalPages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wplegalpage' shortcode in versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. | 4.8 |