Unscored CVE-2023-32624 EUVD-2023-36867GHSA-crww-fc4j-8wwj

Cross-site scripting vulnerability in TS Webfonts for SAKURA 3.1.0 and earlier allows a remote unauthenticated attacker to inject an arbitr…

Published Jul 21, 2023 · Updated Oct 24, 2024 · Assigned by jpcert

Vendor: SAKURA internet Product: TS Webfonts for SAKURA

Description

Cross-site scripting vulnerability in TS Webfonts for SAKURA 3.1.0 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.

Affected products

Vendor	Product	Affected	Fixed
SAKURA internet	TS Webfonts for SAKURA	3.1.0 and earlier	—

References

https://ja.wordpress.org/plugins/ts-webfonts-for-sakura/#developers
https://jvn.jp/en/jp/JVN90560760/