CVE-2023-7246 — System Dashboard < 2.8.10 - XSS via Header Injection
The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameters, which could allow administrators in multisite WordPress configurations to perfo…
Published: 2024-03-20 · CVSS: 5.4 · CVSS 3.1
The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameters, which could allow administrators in multisite WordPress configurations to perform Cross-Site Scripting attacks
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7