CVE-2023-7167

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The Persian Fonts WordPress plugin through 1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Unknown	Persian Fonts	<= 1.6
danialhatami	persian_fonts	<= 1.6

References

https://wpscan.com/vulnerability/6a2eb871-6b6e-4dbb-99f0-dd74d6c61e83/Exploit, Third Party Advisory
https://wpscan.com/vulnerability/6a2eb871-6b6e-4dbb-99f0-dd74d6c61e83/Exploit, Third Party Advisory

Timeline

Published: Feb 27, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-71684.8The Better Follow Button for Jetpack WordPress plugin through 8.0 does not sanitise and escape some of its settings, which could allow high CVE-2023-71695.5Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects S CVE-2023-71706.1The EventON-RSVP WordPress plugin before 2.9.5 does not sanitise and escape some parameters before outputting it back in the page, leading t CVE-2023-71714.8A vulnerability was found in Novel-Plus up to 4.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown funct CVE-2023-71727.2A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is so CVE-2023-71735.4A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part o CVE-2023-71747.1The aBitGone CommentSafe WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as esca CVE-2023-71759.8A vulnerability was found in Campcodes Online College Library System 1.0. It has been rated as critical. Affected by this issue is some unkn CVE-2023-71768.8A vulnerability classified as critical has been found in Campcodes Online College Library System 1.0. This affects an unknown part of the fi CVE-2023-71778.8A vulnerability classified as critical was found in Campcodes Online College Library System 1.0. This vulnerability affects unknown code of CVE-2023-71787.2A vulnerability, which was classified as critical, has been found in Campcodes Online College Library System 1.0. This issue affects some un CVE-2023-71798.8A vulnerability, which was classified as critical, was found in Campcodes Online College Library System 1.0. Affected is an unknown function