Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Swashata WP Category Post List Widget plugin <= 2.0.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Swashata | WP Category Post List Widget | ≤ 2.0.3 | — |
Medium · 6.5
CVE-2023-23828
EUVD-2023-27914GHSA-q6v4-v85x-hgmc
WordPress WP Category Post List Widget Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
Published Aug 10, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack