CVE-2023-5237

The Memberlite Shortcodes WordPress plugin before 1.3.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.

• CWE-79

• https://research.cleantalk.org/cve-2023-5237-memberlite-shortcodes-stored-xss-via-shortcodeExploit, Third Party Advisory
• https://wpscan.com/vulnerability/a46d686c-6234-4aa8-a656-00a65c55d0b0Exploit, Third Party Advisory
• https://research.cleantalk.org/cve-2023-5237-memberlite-shortcodes-stored-xss-via-shortcodeExploit, Third Party Advisory
• https://wpscan.com/vulnerability/a46d686c-6234-4aa8-a656-00a65c55d0b0Exploit, Third Party Advisory

Published

Oct 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-52364Vulnerability of input parameters being not strictly verifie…6.3
• CVE-2023-52365Out-of-bounds read vulnerability in the smart activity recog…5.3
• CVE-2023-52366Out-of-bounds read vulnerability in the smart activity recog…7.5
• CVE-2023-52367Vulnerability of improper access control in the media librar…7.7
• CVE-2023-52368Input verification vulnerability in the account module.Succe…5.3
• CVE-2023-52369Stack overflow vulnerability in the NFC module.Successful ex…9.1
• CVE-2023-52370Stack overflow vulnerability in the network acceleration mod…9.8
• CVE-2023-52371Vulnerability of null references in the motor module.Success…3.5
• CVE-2023-52372Vulnerability of input parameter verification in the motor m…7.5
• CVE-2023-52373Vulnerability of permission verification in the content shar…7.5
• CVE-2023-52374Permission control vulnerability in the package management m…7.5
• CVE-2023-52375Permission control vulnerability in the WindowManagerService…7.5