CoreCVE
Back

MEDIUM

WordPress Heateor Social Comments Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Published Apr 4, 2023

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Team Heateor WordPress Social Comments Plugin for Vkontakte Comments and Disqus Comments plugin <= 1.6.1 versions.

Affected products

Remediation

Vendor solution

Update to 1.6.2 or a higher version.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner Patchstack
Published Apr 4, 2023
Updated Apr 28, 2026
Reserved Jan 20, 2023
Link CVE-2023-23977

CISA Vulnrichment

Updated Feb 19, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2023-23977

Red Hat

No data

ENISA EUVD

Assigner Patchstack
Published Apr 4, 2023
Updated Apr 28, 2026
Link EUVD-2023-28041

GitHub

No data