Product · Delicious Brains

Advanced Custom Fields Pro

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.4

CVE-2023-6701

Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field

The Advanced Custom Fields (ACF) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom text field in all versions up to, and including, 6.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authe…

WP Engine Delicious Brains Advanced Custom Fields (ACF®) Advanced Custom Fields Pro Web / CMS

Feb 5, 2024