CVE-2023-7246

The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameters, which could allow administrators in multisite WordPress configurations to perform Cross-Site Scripting attacks

Affected products

System Dashboard

Bowo System Dashboard

< 2.8.10

Fix

Available

CVSS 3.1

5.4 MEDIUM

EPSS

0.8% (54th percentile)

Weakness

CWE-79

NVD status

Analyzed

Published

2024-03-20