Known CVE

System Dashboard < 2.8.10 - Cross-Site Scripting

The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameters, which could allow administrators in multisite WordPress configurations to perform Cross-Site Scripting attacks through header injection, specifically in the X-Forwarded-For header.

CVE-2023-7246

Medium2023CVSS 5.4CWE-79

cve2023 · wp · wordpress · xss · wp-plugin · authenticated · system-dashboard · vuln

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website