CVE-2023-7230

The illi Link Party! WordPress plugin through 1.0 does not sanitize and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks.

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - contact@wpscan.com

Published

2025-05-15

Last modified

2025-05-16

Weaknesses

CWE-79

Affected products

• Illi Link Party! (Evanliewer)
• Illi Link Party (Unknown)

References

• https://wpscan.com/vulnerability/402e428b-f966-4a36-ace0-d0ded9410b1d/