CVE-2023-4719

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `list_type` parameter in versions up to, and including, 4.3.5 due to insufficient input sanitization and output escaping. Using this vulnerability, unauthenticated attackers could inject arbitrary web scripts into pages that are being executed if they can successfully trick a user into taking an action, such as clicking a malicious link.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Sep 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-471905.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Apollo13Themes Apollo13 Framework Extensions plugin <= 1.9.0 versionCVE-2023-471916.5Authorization Bypass Through User-Controlled Key vulnerability in KaineLabs Youzify – BuddyPress Community, User Profile, Social Network & MCVE-2023-471927.8An agent link vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected instaCVE-2023-471937.8An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecteCVE-2023-471947.8An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecteCVE-2023-471957.8An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecteCVE-2023-471967.8An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecteCVE-2023-471977.8An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecteCVE-2023-471987.8An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecteCVE-2023-471997.8An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affecteCVE-2023-47205.5Floating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV.CVE-2023-472007.8A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privil
CVE-2023-4719: Medium severity, CVSS 6.1 | Vulnix