CVE-2023-0099

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published: Feb 13, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-01008.8In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HT CVE-2023-01018.8A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated att CVE-2023-01029.1LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker t CVE-2023-01037.5If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communic CVE-2023-01047.8The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may CVE-2023-01056.5A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An CVE-2023-01065.4Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-01075.4Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-01085.4Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-01095.4A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to u CVE-2023-01105.4Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-01115.4Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.