PT-2023-20616 · WordPress · Get Your Number Wordpress Plugin

Aymane Mazguiti + 1 · Publicado 2023-06-05 · Atualizado 2025-01-08 · CVE-2023-2634

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Get your number WordPress plugin versions 1.1.3 and earlier

Description The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, for example, in a multisite setup.

Recommendations For Get your number WordPress plugin versions 1.1.3 and earlier, update to a version that addresses the sanitization and escaping of its settings to prevent Stored Cross-Site Scripting attacks.

Exploit

Correção

Identificadores relacionados

CVE-2023-2634

Produtos afetados

Get Your Number Wordpress Plugin

Referências · 3

• 🔥 https://wpscan.com/vulnerability/1df111aa-6057-47a2-8e8b-9ef5ec3bb472 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-2634 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-2634 · Aviso do Fabricante