Read the docs

Pretty Url Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Pretty Url Project records in CISA KEV

No Pretty Url Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pretty Url 1 record MEDIUM

Records

1 record in Pretty Url · all components

TI-2023-01890 CVE-2023-2009 · GHSA-h9hj-4382-6wh4

Pretty Url <= 1.5.4 - Admin+ Stored XSS in plugin settings

Priority MEDIUM 55

Plugin does not sanitize and escape the URL field in the Pretty Url WordPress plugin through 1.5.4 settings, which could allow high-privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00824 Published 2023-05-15 No fix listed CWE-79
Open these records in search →