CVE-2023-5980: BSK Forms Blacklist < 3.7 - Admin+ Stored Cross-Site Scripting
The BSK Forms Blacklist WordPress plugin before 3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed (for example in multisite setup).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-5980?
The severity of CVE-2023-5980 is considered high due to the potential for stored Cross-Site Scripting attacks.
How do I fix CVE-2023-5980?
To fix CVE-2023-5980, update the BSK Forms Blacklist plugin to version 3.7 or later.
Who is affected by CVE-2023-5980?
CVE-2023-5980 affects high privilege users such as administrators of WordPress sites using versions of the plugin before 3.7.
What types of attacks can CVE-2023-5980 facilitate?
CVE-2023-5980 can facilitate Stored Cross-Site Scripting (XSS) attacks.
Is CVE-2023-5980 specific to certain versions of WordPress?
CVE-2023-5980 is specific to the BSK Forms Blacklist WordPress plugin and is not directly related to the WordPress core version.