CVE-2023-54351
HIGH
NVD
CVSS Score
7.2
Severity
HIGH
Published
Jun 08, 2026
Vendor
unknown
Description
WordPress Sonaar Music Plugin 4.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the comment functionality. Attackers can submit JavaScript payloads in the comment parameter to wp-comments-post.php which are stored and executed in the browsers of users viewing the affected playlist pages.