CVE-2023-0252: Contextual Related Posts < 3.3.1 - Contributor+ Stored XSS
The Contextual Related Posts WordPress plugin before 3.3.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the Contextual Related Posts WordPress plugin?
The vulnerability ID for the Contextual Related Posts WordPress plugin is CVE-2023-0252.
What is the severity level of CVE-2023-0252?
The severity level of CVE-2023-0252 is medium with a score of 5.4.
What does the Contextual Related Posts WordPress plugin vulnerability allow?
The vulnerability allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Which version of the Contextual Related Posts WordPress plugin is affected by CVE-2023-0252?
Version up to and excluding 3.3.1 of the Contextual Related Posts WordPress plugin is affected by CVE-2023-0252.
Where can I find more information about CVE-2023-0252?
You can find more information about CVE-2023-0252 at the following reference link: [https://wpscan.com/vulnerability/5754a4fd-1adf-47aa-976f-3b28750058c2].