CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-32624

Cross-site scripting vulnerability in TS Webfonts for SAKURA 3.1.0 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.

Status: Published
Published: 2023-07-21
Updated: 2024-10-24
Assigning organization: jpcert

Description

Cross-site scripting vulnerability in TS Webfonts for SAKURA 3.1.0 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAKURA internet Inc. TS Webfonts for SAKURA

3.1.0 and earlieraffected

References

https://ja.wordpress.org/plugins/ts-webfonts-for-sakura/#developers ↗
https://jvn.jp/en/jp/JVN90560760/ ↗