CVE Database /
CVE-2023-47876
CVE · High
CVE-2023-47876 — Perfmatters [perfmatters] < 2.1.7
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-47876
|
Perfmatters [perfmatters] < 2.1.7 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
High
7.1
|
< 2.1.7
|
2.1.7 |
2023-11-21 |
—
|
CVE-2023-47876
The Perfmatters plugin for WordPress contained a cross-site scripting vulnerability that allowed attackers to inject and execute malicious scripts on affected websites. The flaw, discovered by Dave Jong, could enable threat actors to insert harmful code including redirects, ads, or arbitrary HTML that would run when visitors accessed the site. Versions prior to 2.1.7 were vulnerable, and the issue was resolved in version 2.1.7 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings