CVE-2023-0603

PoC —

CVSS 3.1

8.8 high

EPSS

14%p96

Published

May 8, 2023 (May 8, 2023)

Modified

Jun 17, 2026

Description

The Sloth Logo Customizer WordPress plugin through 2.0.2 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

Vendors: sloth logo customizer project
Products: sloth logo customizer
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (13.9%)

In the news0 stories

No ingested article mentions this CVE yet.