Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Thomas Scholl canvasio3D Light plugin <= 2.4.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Thomas Scholl | canvasio3D Light | ≤ 2.4.6 | — |
High · 7.1
CVE-2023-45062
EUVD-2023-49383GHSA-hw85-44xg-3h9f
WordPress Download canvasio3D Light Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)
Published Oct 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack