Medium · 5.9 CVE-2023-46200 EUVD-2023-50443GHSA-xrwj-6h7r-w997

WordPress Smart App Banner Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)

Published Oct 27, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Stephen Darlington, Wandle Software Product: Smart App Banner

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Stephen Darlington, Wandle Software Limited Smart App Banner plugin <= 1.1.3 versions.

Affected products

Vendor	Product	Affected	Fixed
Stephen Darlington, Wandle Software	Smart App Banner	≤ 1.1.3	—

References

https://patchstack.com/database/vulnerability/smart-app-banner/wordpress-smart-app-banner-plugin-1-1-3-cross-site-scripting-xss?_s_id=cve vdb-entry