Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP htaccess Control plugin <= 3.5.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP htaccess Control | ≤ 3.5.1 | — |
Medium · 5.9
CVE-2023-25462
EUVD-2023-29417GHSA-pv6p-fgg5-65vf
WordPress WP htaccess Control Plugin <= 3.5.1 is vulnerable to Cross Site Scripting (XSS)
Published Aug 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack