Description
Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in Poporon Pz-LinkCard plugin <= 2.4.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Poporon | Pz-LinkCard | ≤ 2.4.8 | — |
High · 7.1
CVE-2023-47790
EUVD-2023-51888GHSA-v62f-3q2m-x4r6
WordPress Pz-LinkCard Plugin <= 2.4.8 is vulnerable to Cross Site Request Forgery (CSRF)
Published Nov 22, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack