CVE-2023-7084

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

The Voting Record WordPress plugin through 2.0 is missing sanitisation as well as escaping, which could allow any authenticated users, such as subscriber to perform Stored XSS attacks

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Unknown	Voting Record	<= 2.0

References

https://magos-securitas.com/txt/CVE-2023-7084.txtExploit, Third Party Advisory
https://wpscan.com/vulnerability/5e51e239-919b-4e74-a7ee-195f3817f907/Third Party Advisory
https://magos-securitas.com/txt/CVE-2023-7084.txtExploit, Third Party Advisory
https://wpscan.com/vulnerability/5e51e239-919b-4e74-a7ee-195f3817f907/Third Party Advisory

Timeline

Published: Jan 16, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-70855.4The Scalable Vector Graphics (SVG) WordPress plugin through 3.4 does not sanitize uploaded SVG files, which could allow users with a role as CVE-2023-70865.4The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as A CVE-2023-70885.4The Add SVG Support for Media Uploader | inventivo WordPress plugin through 1.0.5 does not sanitize uploaded SVG files, which could allow us CVE-2023-70895.4The Easy SVG Allow WordPress plugin through 1.0 does not sanitize uploaded SVG files, which could allow users with a role as low as Author t CVE-2023-70908.8A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore,CVE-2023-70918.8A vulnerability was found in Dreamer CMS 4.1.3. It has been declared as problematic. This vulnerability affects unknown code of the file /up CVE-2023-70924.3A vulnerability was found in Uniway UW-302VP 2.0. It has been rated as problematic. This issue affects some unknown processing of the file /CVE-2023-70937.8A vulnerability classified as critical has been found in KylinSoft kylin-system-updater up to 2.0.5.16-0k2.33. Affected is an unknown functi CVE-2023-70947.5A vulnerability classified as problematic was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected by this vulnerability is CVE-2023-70959.8A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024. Affected by this issue is the fu CVE-2023-70969.8A flaw has been found in code-projects Faculty Management System 1.0. The affected element is an unknown function of the file /admin/php/cru CVE-2023-70979.8A vulnerability classified as critical has been found in code-projects Water Billing System 1.0. This affects an unknown part of the file /a