CVE-2023-3746

CVE-2023-3746: ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS

Vendor Unknown
Product ActivityPub
Published October 16, 2023
Last update April 23, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The ActivityPub WordPress plugin before 1.0.0 does not sanitize and escape some data from post content, which could allow contributor and above role to perform Stored Cross-Site Scripting attacks

Key dates

02Disclosure timeline

October 16, 2023 CVE published
April 23, 2025 Record updated