WordPress security by component

Lana Text to Image

Plugin description

Lana Text to Image is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 24, 2023; the highest CVE/CNA score is 6.4.

Plugin slug: lana-text-to-image

Latest vulnerability

CVE-2023-3387: Lana Text to Image: Cross-site scripting

Lana Text to Image is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedJun 24, 2023

Safe version guidanceSee mitigation notes

		Safe version
Jun 24, 2023	CVE-2023-3387 Lana Text to Image: Cross-site scripting Lana Text to Image is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVD5.4