Approved changes feed: RSS · Atom

cpe:2.3:a:shooflysolutions:simply_excerpts:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorShooflysolutions (c3c732dc-9369-57b7-8228-67042d632999)
ProductSimply Excerpts (15a5d488-10a8-502e-8b7d-06fd902c4cb9)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5137 vulnerable 2026-06-08 06:19:42.601560 Simply Excerpts <= 1.4 - Admin+ Stored XSS
The Simply Excerpts WordPress plugin through 1.4 does not sanitize and escape some fields in the plugin settings, which could allow high-privilege users such as an administrator to inject arbitrary web scripts even when the unfiltered_html capability is disallowed (for example in a multisite setup).
Published: 2023-12-04T21:28:33.766Z
Updated: 2025-05-29T13:51:32.153Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.