CVE-2023-0333

The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Score

CVSS 3.1 5.4 Medium

Status

Modified - contact@wpscan.com

Published

2023-02-13

Last modified

2025-03-21

Affected products

• Templatesnext Toolkit (Templatesnext)
• Templatesnext Toolkit (Unknown)

References

• https://wpscan.com/vulnerability/e86ff4d5-d549-4c71-b80e-6a9b3bfddbfc