PT-2023-23904 · WordPress · Rank Math Seo

Rafie Muhammad · Published 2023-08-05 · Updated 2024-03-25 · CVE-2023-32600

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Rank Math SEO plugin versions prior to 1.0.120

Description A Stored Cross-Site Scripting (XSS) vulnerability has been identified, posing a severe security risk. This issue affects over two million websites, exposing them to potential cyber-attacks. The vulnerability allows for malicious script execution, which can lead to unauthorized access and data breaches.

Recommendations For versions prior to 1.0.120, update to version 1.0.120 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the website to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-32600

Affected Products

Rank Math Seo

References · 4

• https://osv.dev/vulnerability/CVE-2023-32600 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32600 · Security Note
• https://patchstack.com/database/vulnerability/seo-by-rank-math/wordpress-rank-math-seo-plugin-1-0-119-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/iSecurity/status/1772511700748820822 · Twitter Post