Sonaar Music Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:sonaar:sonaar_music_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sonaar (215e7c49-42c4-5808-ab9a-657c35f1e86f) |
|---|---|
| Product | Sonaar Music Plugin (138c6f45-b457-5823-9963-8366e21d172d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-54351 |
vulnerable | 2026-06-08 06:19:40.627466 |
WordPress Sonaar Music Plugin 4.7 Stored XSS via Comments
HIGH (7.2)
WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the comment functionality. Attackers can submit JavaScript payloads in the comment parameter to wp-comments-post.php which are stored and executed in the browsers of users viewing the affected playlist pages.
Published: 2026-06-08T01:55:29.282Z
Updated: 2026-06-08T11:01:45.212Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.