CVE-2023-0421: Cloud Manager Project Cloud Manager

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it in an admin panel, allowing unauthenticated attackers to trick a logged in admin to trigger a XSS payload by clicking a link.

Affected products

• Cloud Manager Project Cloud Manager: up to and including 1.0

Published 2023-05-08. Last modified 2026-06-17.