Wpexperts User Avatar Reloaded vulnerabilities

1 vulnerability

Known vulnerabilities in Wpexperts User Avatar Reloaded, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4CVE-2023-4798unknownuser avatar+2
EPSS score
0.46%
The User Avatar WordPress plugin before 1.2.2 does not properly sanitize and escape certain of its shortcodes attributes, which could allow relatively low-privileged users like contributors to conduct Stored XSS attacks.