Skip to content
OpenAdvisories
High · 7.1 CVE-2023-39164 EUVD-2023-42899GHSA-39fj-6jmr-w7rx

WordPress Molongui Plugin <= 4.6.19 is vulnerable to Cross Site Scripting (XSS)

Published Sep 4, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: molongui Product: Author Box for Authors, Co-Authors, Multiple Authors and Guest Authors – Molongui

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Molongui Author Box for Authors, Co-Authors, Multiple Authors and Guest Authors – Molongui plugin <= 4.6.19 versions.

Affected products

VendorProductAffectedFixed
Molongui Author Box for Authors, Co-Authors, Multiple Authors and Guest Authors – Molongui ≤ 4.6.19 —

References