CVE-2023-5620
Webpushr < 4.35.0 - Unauthenticated Stored XSS
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
27 nov 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
The Web Push Notifications WordPress plugin before 4.35.0 does not prevent visitors on the site from changing some of the plugin options, some of which may be used to conduct Stored XSS attacks.
Productos afectados
Unknown · Web Push Notifications