PT-2023-25304 · WordPress · Beplus Sermon'E – Sermons Online

Abdi Pranata · Published 2023-06-19 · Updated 2023-06-27 · CVE-2023-35776

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Beplus Sermon'e – Sermons Online plugin versions prior to 1.0.0

Description A Stored Cross-Site Scripting (XSS) vulnerability exists, allowing attackers to inject malicious scripts. This issue affects users with contributor or higher permissions.

Recommendations For Beplus Sermon'e – Sermons Online plugin versions prior to 1.0.0, update to a version newer than 1.0.0 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-35776

Affected Products

Beplus Sermon'E – Sermons Online

References · 3

• https://osv.dev/vulnerability/CVE-2023-35776 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-35776 · Security Note
• https://patchstack.com/database/vulnerability/sermone-online-sermons-management/wordpress-sermon-e-sermons-online-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Note