CVE-2023-1377: 
WordPress vulnerability analysis and mitigation

The Solidres WordPress plugin through version 0.9.4 contains multiple reflected Cross-Site Scripting (XSS) vulnerabilities. The vulnerability was discovered and publicly disclosed on March 13, 2023, and was assigned CVE-2023-1377. The issue affects the Solidres plugin for WordPress installations (WPScan).

The vulnerability stems from the plugin's failure to properly sanitize and escape numerous parameters before outputting them back in pages. This security flaw has been assigned a CVSS score of 7.5 (High) and is classified under CWE-79. The vulnerability falls under the OWASP Top 10 category A7: Cross-Site Scripting (XSS) (WPScan).

The vulnerability could be exploited against high-privilege users such as administrators. Successful exploitation could allow attackers to execute malicious scripts in the context of the affected user's browser session, potentially leading to unauthorized access or actions being performed on behalf of the administrator (WPScan).

As of the vulnerability disclosure, there is no known fix available for this security issue. Users of the Solidres WordPress plugin version 0.9.4 and earlier should consider implementing additional security measures or evaluating alternative solutions (WPScan).