Medium · 6.5 CVE-2023-23831 EUVD-2023-27917GHSA-chjg-2fmq-7r6v

WordPress Rating Widget Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)

Published Jun 13, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Rating-Widget Rating-Widget: Star Review System plugin <= 3.1.9 versions.

Vendor	Product	Affected	Fixed
Rating-Widget	Rating-Widget: Star Review System	≤ 3.1.9	—