CVE-2023-54351EPSS p6.8%

CVE-2023-54351CVE-2023-54351

Description

WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the comment functionality. Attackers can submit JavaScript payloads in the comment parameter to wp-comments-post.php which are stored and executed in the browsers of users viewing the affected playlist pages.

Scoring

CVSS 7.2 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
EPSS0.17% probability of exploitation · percentile 6.8% · 2026-06-18T12:00:27Z
Last modified2026-06-08

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2019-25743
CVE
CVE-2025-1232
CVE
CVE-2026-7556
CVE
CVE-2017-20251
CVE
WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability
CVE
CVE-2025-2103
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.