PT-2023-19120 · Gtmetrix · Gtmetrix For Wordpress

Nguyen Xuan Chien · Published 2023-03-30 · Updated 2023-04-05 · CVE-2023-23677

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions GTmetrix GTmetrix for WordPress plugin versions 0.4.5 and earlier

Description A Reflected Cross-Site Scripting (XSS) issue has been identified. This type of issue occurs when an application takes untrusted input and reflects it back to the user without proper validation or sanitization, allowing an attacker to inject malicious scripts into the application.

Recommendations For GTmetrix GTmetrix for WordPress plugin versions 0.4.5 and earlier, update to a version later than 0.4.5 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-23677

Affected Products

Gtmetrix For Wordpress

References · 4

• https://osv.dev/vulnerability/CVE-2023-23677 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-23677 · Security Note
• https://patchstack.com/database/vulnerability/gtmetrix-for-wordpress/wordpress-gtmetrix-for-wordpress-plugin-0-4-5-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://t.me/cibsecurity/61163 · Telegram Post