Medium · 6.8 CVE-2023-47549 EUVD-2023-51660GHSA-5h2m-6q68-2g79

WordPress EazyDocs Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)

Published Nov 14, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability on 302 response page in spider-themes EazyDocs plugin <= 2.3.3 versions.

Vendor	Product	Affected	Fixed
spider-themes	EazyDocs – Most Powerful Knowledge base, wiki, Documentation Builder Plugin (easy docs, knowledgebase)	≤ 2.3.3	—