Link Party Vulnerabilities

The illi Link Party! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an unknown parameter in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execut...

CVSS:

7.2

Affected:

up to 1.0

Fix:

No patched version reported

Disclosed:

Jan 23, 2024

CVE-2023-7228 on NVD →

The illi Link Party! plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.0. This makes it possible for unauthenticated attackers to delete arbitrary links.

CVSS:

5.3

Affected:

up to 1.0

Fix:

No patched version reported

Disclosed:

Jan 23, 2024

CVE-2023-7231 on NVD →

The illi Link Party! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject ar...

CVSS:

4.4

Affected:

up to 1.0

Fix:

No patched version reported

Disclosed:

Jan 23, 2024

CVE-2023-7230 on NVD →

The illi Link Party! plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings via a forged request granted they can trick a site...

CVSS:

4.3

Affected:

up to 1.0

Fix:

No patched version reported

Disclosed:

Jan 23, 2024

CVE-2023-7229 on NVD →