CVE-2023-51492: WordPress If-So Dynamic Content Personalization Plugin <= 1.6.3.1 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If So Plugin If-So Dynamic Content Personalization allows Stored XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.6.3.1.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51492?
CVE-2023-51492 is classified as a Stored Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2023-51492?
To fix CVE-2023-51492, update the If-So Dynamic Content Personalization plugin to a version above 1.6.3.1.
What is the potential impact of CVE-2023-51492?
The potential impact of CVE-2023-51492 includes unauthorized script execution in the user's browser, leading to data theft or user impersonation.
Which versions are affected by CVE-2023-51492?
CVE-2023-51492 affects If-So Dynamic Content Personalization versions from n/a through 1.6.3.1.
Is CVE-2023-51492 a high profile vulnerability?
Yes, CVE-2023-51492 is considered high profile due to its nature that allows stored XSS attacks.