CVE-2023-35092

MediumCVSS 5.9

Published: 30/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

The Breadcrumb simple plugin in versions <= 1.3 has a stored Cross-Site Scripting (XSS) vulnerability with authentication (admin+).

An attacker with administrative access can inject malicious code, potentially leading to data theft or session hijacking.

It is recommended to update the plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abhay Yadav Breadcrumb simple plugin <= 1.3 versions.