CVE-2023-23883

Опубликовано: 09 мая 2023

Источник: nvd

CVSS3: 5.9

CVSS3: 4.8

EPSS Низкий

Описание

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Gwyer WP Content Filter plugin <= 3.0.1 versions.

Ссылки

https://patchstack.com/database/vulnerability/wp-content-filter/wordpress-wp-content-filter-censor-all-offensive-content-from-your-site-plugin-3-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
Third Party Advisory
https://patchstack.com/database/vulnerability/wp-content-filter/wordpress-wp-content-filter-censor-all-offensive-content-from-your-site-plugin-3-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wp_content_filter_-_censor_all_offensive_content_from_your_site_project:wp_content_filter_-_censor_all_offensive_content_from_your_site:*:*:*:*:*:wordpress:*:*

Версия до 3.0.1 (включая)

EPSS

Процентиль: 24%

0.00079

Низкий

5.9 Medium

CVSS3

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-vw8m-5568-cfv8

CVSS3: 5.9

github

больше 2 лет назад

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Gwyer WP Content Filter plugin <= 3.0.1 versions.

EPSS

Процентиль: 24%

0.00079

Низкий

5.9 Medium

CVSS3

4.8 Medium

CVSS3

Дефекты

CWE-79