PT-2023-25304 · WordPress · Beplus Sermon'E – Sermons Online

Abdi Pranata · Publicado 2023-06-19 · Atualizado 2023-06-27 · CVE-2023-35776

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Beplus Sermon'e – Sermons Online plugin versions prior to 1.0.0

Description A Stored Cross-Site Scripting (XSS) vulnerability exists, allowing attackers to inject malicious scripts. This issue affects users with contributor or higher permissions.

Recommendations For Beplus Sermon'e – Sermons Online plugin versions prior to 1.0.0, update to a version newer than 1.0.0 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-35776

Produtos afetados

Beplus Sermon'E – Sermons Online

Referências · 3

• https://osv.dev/vulnerability/CVE-2023-35776 · Aviso do Fabricante
• https://patchstack.com/database/vulnerability/sermone-online-sermons-management/wordpress-sermon-e-sermons-online-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-35776 · Nota de Segurança