CVE-2023-6456

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

The WP Review Slider WordPress plugin before 13.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jan 22, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-64577.1Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Windows (Hitachi Tuning Manager server component) allows local user CVE-2023-64589.8Mattermost webapp fails to validate route parameters in/<TEAM_NAME>/channels/<CHANNEL_NAME> allowing an attacker to perform a client-side pa CVE-2023-64595.3Mattermost is grouping calls in the /metrics endpoint by id and reports that id in the response. Since this id is the channelID, the public CVE-2023-64605.5A potential logging of the firestore key via logging within nodejs-firestore exists - Developers who were logging objects through this._sett CVE-2023-64616.1Cross-site Scripting (XSS) - Reflected in GitHub repository viliusle/minipaint prior to 4.14.0.CVE-2023-64626.1A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0. Affected is an unk CVE-2023-64635.4A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vuln CVE-2023-64649.8A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected by this issue is som CVE-2023-64656.1A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as problematic. This affects an un CVE-2023-64666.1A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. This vulnerability affects unknown code of the file CVE-2023-64673.7A vulnerability was found in Thecosy IceCMS 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file CVE-2023-64724.8A vulnerability, which was classified as problematic, has been found in PHPEMS 7.0. This issue affects some unknown processing of the file a