CVE-2023-0175

Smart Logo Showcase Lite <= 1.1.9 - Contributor+ Stored XSS

The Responsive Clients Logo Gallery Plugin for WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

We have discovered 2,966 live websites that are affected by CVE-2023-0175.

Run a Free Instant Scan



Affected Software

Product  Smart Logo Showcase Lite
Category Wordpress Plugins
Vulnerable Domains2,966 live websites (100% of Smart Logo Showcase Lite install base)
Vulnerable Versions
  • from 0 through 1.1.9
Vulnerable Versions Count18 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')



Details

  • Published - Mar 20, 2023
  • Updated - Feb 26, 2025

Credits

  • Lana Codes (finder)
  • WPScan (coordinator)

Website Distribution by Country

Number of websites using CVE-2023-0175
United States749 websites


Germany280 websites
France174 websites
Italy160 websites
GB139 websites
Netherlands130 websites
India102 websites
Spain88 websites
Poland86 websites
Russia71 websites

Website Distribution by TLD

Number of websites using CVE-2023-0175
.com1,037 websites
.org193 websites
.de132 websites
.it116 websites
.nl115 websites
.com.br67 websites
.co.uk66 websites
.fr66 websites
.pl61 websites
.ru59 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2023-0175

Top websites that are affected by CVE-2023-0175. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
******.com United States**,***
********.me United States**,***
****.***.edu United States**,***
*************.com United States***,***
************.org United States***,***
*******.com United States***,***
****.org Switzerland***,***
****************.com United States***,***
****.org United States***,***
*******.**.ke Bulgaria***,***
See full domain list

FAQ

CVE-2023-0175 is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Smart Logo Showcase Lite
A total of 2,966 websites have been identified as vulnerable to CVE-2023-0175, based on global website indexing conducted by WebTechSurvey.
The Smart Logo Showcase Lite is affected by the CVE-2023-0175 vulnerability.
Smart Logo Showcase Lite versions up to and including 1.1.9 are vulnerable to CVE-2023-0175.