Approved changes feed: RSS · Atom

cpe:2.3:a:enej_bajgoric_/_gagan_sandhu_/_ctlt_dev:user_avatar:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEnej Bajgoric / Gagan Sandhu / Ctlt Dev (805c28f1-f8b5-59b7-ae20-a1d88724c1f8)
ProductUser Avatar (79fafa50-67bf-5586-bfca-1af2afdc978c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46621 vulnerable 2026-06-08 06:12:45.408622 WordPress User Avatar Plugin <= 1.4.11 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Enej Bajgoric / Gagan Sandhu / CTLT DEV User Avatar plugin <= 1.4.11 versions.
Published: 2023-11-08T15:16:10.974Z
Updated: 2026-04-28T16:08:47.293Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.