CVE-2023-0099

PoC —

CVSS 3.1

6.1 medium

EPSS

2%p76

Published

Feb 13, 2023 (Feb 13, 2023)

Modified

Jun 17, 2026

Description

The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Vendors: getlasso
Products: simple urls
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.