CVE-2023-50368: WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is

WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS)

Status

Published

2023-12-14

Updated

2026-04-28

Assigning organization

Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Shortcodes and extra features for Phlox theme allows Stored XSS.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Averta Shortcodes and extra features for Phlox theme

Default version status: unaffected

n/a to ≤ 2.15.2affected

References

https://patchstack.com/database/vulnerability/auxin-elements/wordpress-shortcodes-and-extra-features-for-phlox-theme-plugin-2-15-2-cross-site-scripting-xss-vulnerability?_s_id=cve ↗