CVE-2023-0099

Simple URLs < 115 - Multiple Reflected XSS

published February 13, 2023

CVSS
—
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01726 · 77.4th percentile
Published
2023-02-13T14:32Z
EPSS history
Timeline
  • 13 FEB 14:32Z
    Simple URLs < 115 - Multiple Reflected XSS
    cvelistv5