PT-2023-19103 · Mainwp · Mainwp Code Snippets Extension

Dave Jong · CVE-2023-23650 · Publicado 2023-03-23 · Atualizado 2023-03-27

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions MainWP MainWP Code Snippets Extension plugin versions prior to 4.0.3

Description The issue is related to a Stored Cross-Site Scripting (XSS) vulnerability. This vulnerability can be exploited by authenticated users with subscriber or higher privileges.

Recommendations For versions prior to 4.0.3, update to version 4.0.3 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-23650

Produtos afetados

Mainwp Code Snippets Extension

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-23650 · Nota de Segurança
• https://patchstack.com/database/vulnerability/mainwp-code-snippets-extension/wordpress-mainwp-code-snippets-extension-plugin-4-0-2-subscriber-stored-cross-site-scripting-vulnerability?_s_id=cve · Nota
• https://t.me/cibsecurity/60581 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-23650 · Aviso do Fabricante