Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-48321 EUVD-2023-52377GHSA-pq43-96mh-jvhm

WordPress Accelerated Mobile Pages Plugin <= 1.0.88.1 is vulnerable to Cross Site Scripting (XSS)

Published Nov 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmed Kaludi, Mohammed Kaludi AMP for WP – Accelerated Mobile Pages allows Stored XSS.This issue affects AMP for WP – Accelerated Mobile Pages: from n/a through 1.0.88.1.

Affected products

VendorProductAffectedFixed
Ahmed Kaludi, Mohammed Kaludi AMP for WP – Accelerated Mobile Pages ≤ 1.0.88.1 —

References