CVE-2023-0983

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The stylish-cost-calculator-premium WordPress plugin before 7.9.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Stored Cross-Site Scripting which could be used against admins when viewing submissions submitted through the Email Quote Form.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected software

Vendor	Product	Versions
Unknown	Stylish Cost Calculator Premium	< 7.9.0

References

https://wpscan.com/vulnerability/73353221-3e6d-44e8-bf41-55a0fe57d81fExploit, Third Party Advisory
https://wpscan.com/vulnerability/73353221-3e6d-44e8-bf41-55a0fe57d81fExploit, Third Party Advisory

Timeline

Published: Apr 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-09858.8An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual ver CVE-2023-09869.8A vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. This affects an unknown part of CVE-2023-09875.4A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown c CVE-2023-09888.8A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects CVE-2023-09895.7An information disclosure issue in GitLab CE/EE affecting all versions starting from 13.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 p CVE-2023-09926.1The Shield Security plugin for WordPress is vulnerable to stored Cross-Site Scripting in versions up to, and including, 17.0.17 via the 'Use CVE-2023-09934.3The Shield Security plugin for WordPress is vulnerable to Missing Authorization on the 'theme-plugin-file' AJAX action in versions up to, an CVE-2023-09947.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.CVE-2023-09955.4Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to v2.0.1.CVE-2023-09967.8There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this throug CVE-2023-09978.8A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some un CVE-2023-09985.3A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part