CVE-2023-1126

WP FEvents Book <= 0.46 - Subscriber+ Stored XSS

CVSS 5.4 MEDIUMEPSS 0.4%

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.4EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

24 abr 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

The WP FEvents Book WordPress plugin through 0.46 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Cross-Site Scripting attacks

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Produtos afetados

Unknown · WP FEvents Book

Referências

https://wpscan.com/vulnerability/87ce3c59-b234-47bf-abca-e690b53bbe82