CVE-2023-27422
Published Aug 8, 2023Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes NS Coupon To Become Customer plugin <= 1.2.2 versions.
- evidence mentions
- 1
- Buzz score
- 11.9
Vendor archive
3 CVEs tagged to vendor nsthemes — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes NS Coupon To Become Customer plugin <= 1.2.2 versions.
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes Advanced Social Pixel plugin <= 2.1.1 versions.
An unprivileged user could use the functionality of the NS WooCommerce Watermark WordPress plugin through 2.11.3 to load images that hide malware for example from passing maliciou…