CVE-2023-49169: WordPress Ads by datafeedr.com Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in datafeedr.Com Ads by datafeedr.Com allows Stored XSS.This issue affects Ads by datafeedr.Com: from n/a through 1.2.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49169?
CVE-2023-49169 is considered a high priority due to its potential for stored cross-site scripting (XSS) attacks.
How do I fix CVE-2023-49169?
The recommended fix for CVE-2023-49169 is to update the Datafeedr Ads plugin to a version higher than 1.2.0.
What version of Datafeedr Ads is affected by CVE-2023-49169?
CVE-2023-49169 affects the Datafeedr Ads plugin versions up to and including 1.2.0.
What type of vulnerability is CVE-2023-49169?
CVE-2023-49169 is an improper neutralization of input during web page generation vulnerability, specifically associated with stored cross-site scripting (XSS).
Can CVE-2023-49169 lead to data breaches?
Yes, CVE-2023-49169 can lead to data breaches as it allows attackers to execute malicious scripts in the contexts of user sessions.