My Content Management Vulnerabilities

The My Content Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.7.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject...

CVSS:

4.4

Affected:

up to 1.7.7

Fixed in:

1.7.7

Disclosed:

Jun 30, 2023

CVE-2023-34377 on NVD →

The My Content Management plugin for WordPress may have been vulnerable to Cross-Site Scripting in versions less than or equal to 1.7.1. Version 1.7.2 of the plugin implemented extensive sanitization and escaping on user supplied inputs which means there may have been exploitable cross-site scripting vulnerabilities pr...

CVSS:

6.4

Affected:

1.7.1 – 1.7.1

Fixed in:

1.7.2

Disclosed:

Jun 2, 2022