medium6.5
CVE-2023-26536
Auth.
Impact
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Jonk @ Follow me Darling Sp*tify Play Button for WordPress plugin <= 2.05 versions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Followmedarling | Spotify-Play-Button-For-Wordpress | before 2.06 |
Weakness classification
References
- NVD record
- CVE.org record
- https://patchstack.com/database/vulnerability/spotify-play-button-for-wordpress/wordpress-sp-tify-play-button-for-wordpress-plugin-2-05-cross-site-scripting-xss-vulnerability?_s_id=cve
- https://patchstack.com/database/vulnerability/spotify-play-button-for-wordpress/wordpress-sp-tify-play-button-for-wordpress-plugin-2-05-cross-site-scripting-xss-vulnerability?_s_id=cve