Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.7 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pixelgrade | Comments Ratings | ≤ 1.1.7 | — |
Medium · 5.9
CVE-2023-23702
EUVD-2023-27788GHSA-7m7m-p296-cg75
WordPress Comments Ratings Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)
Published Nov 6, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack