PT-2023-18653 · Woocommerce · Chilidevs Return/Warranty Management System

Le Ngoc Anh · CVE-2023-22710 · Publicado 2023-05-08 · Atualizado 2023-05-11

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions chilidevs Return and Warranty Management System for WooCommerce plugin versions 1.2.3 and earlier

Description The issue is related to an Unauth. Reflected Cross-Site Scripting (XSS) vulnerability. This vulnerability can be exploited without authentication.

Recommendations For versions 1.2.3 and earlier, update to a version later than 1.2.3 to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the plugin to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-22710

Produtos afetados

Chilidevs Return/Warranty Management System

Referências · 4

• https://patchstack.com/database/vulnerability/wc-return-warrranty/wordpress-return-and-warranty-management-system-for-woocommerce-plugin-1-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-22710 · Nota de Segurança
• https://t.me/cibsecurity/63531 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-22710 · Aviso do Fabricante