CVE-2023-25488

MEDIUM CVSS: 5.9 Published: 2023-09-01 Modified: 2026-06-17

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Duc Bui Quang WP Default Feature Image plugin <= 1.0.1.1 versions.

Affected Platforms

Ducbuiquang Wp Default Feature Image

Weakness Type

CWE-79

References