Medium · 5.3 CVE-2023-46310 EUVD-2023-50531GHSA-69h4-r42q-6wmv

WordPress wpDiscuz plugin <= 7.6.10 - Content Injection vulnerability

Published Jun 4, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpDiscuz allows Code Injection.This issue affects wpDiscuz: from n/a through 7.6.10.

Affected products

Vendor	Product	Affected	Fixed
gVectors Team	wpDiscuz	≤ 7.6.10	—

References

https://patchstack.com/database/vulnerability/wpdiscuz/wordpress-wpdiscuz-plugin-7-6-10-content-injection-vulnerability?_s_id=cve vdb-entry