Medium · 5.9 CVE-2023-47184 EUVD-2023-51317GHSA-xp8c-wvr5-8f8x

WordPress Admin Bar & Dashboard Access Control Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)

Published Nov 6, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Proper Fraction LLC. Admin Bar & Dashboard Access Control plugin <= 1.2.8 versions.

Vendor	Product	Affected	Fixed
Proper Fraction LLC.	Admin Bar & Dashboard Access Control	≤ 1.2.8	—