PT-2023-23630 · Dream Theme · The7

Dave Jong · Publicado 2023-11-13 · Atualizado 2024-06-21 · CVE-2023-32123

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Dream-Theme The7 versions prior to 11.7.4

Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows Stored XSS.

Recommendations For versions prior to 11.7.4, update to version 11.7.4 or later to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2023-32123

Produtos afetados

The7

Referências · 5

• https://osv.dev/vulnerability/CVE-2023-32123 · Aviso do Fabricante
• https://t.me/cvenotify/62521 · Publicação no Telegram
• https://t.me/cvenotify/84041 · Publicação no Telegram
• https://patchstack.com/database/vulnerability/dt-the7/wordpress-the7-website-and-ecommerce-builder-for-wordpress-theme-11-0-3-cross-site-request-forgery-csrf?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-32123 · Nota de Segurança