PT-2023-8492 · WordPress · Tc Ultimate Wp Query Search Filter

István Márton + 1 · Published 2023-01-18 · Updated 2023-04-28 · CVE-2023-23832

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TC Ultimate WP Query Search Filter plugin versions <= 1.0.10

Description The issue is related to a Cross-Site Scripting (XSS) vulnerability. It is associated with the failure to protect the structure of web pages, which could allow a remote attacker to perform inter-site script attacks.

Recommendations For TC Ultimate WP Query Search Filter plugin versions <= 1.0.10, update to a version higher than 1.0.10 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2024-00982

CVE-2023-23832

Affected Products

Tc Ultimate Wp Query Search Filter

References · 6

• https://bdu.fstec.ru/vul/2024-00982 · Security Note
• https://osv.dev/vulnerability/CVE-2023-23832 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-23832 · Security Note
• https://wphive.com/plugins/ultimate-wp-query-search-filter/?plugin_version=1.0.10 · Note
• https://vuldb.com/?id.227248 · Note
• https://patchstack.com/database/vulnerability/ultimate-wp-query-search-filter/wordpress-ultimate-wp-query-search-filter-plugin-1-0-10-cross-site-scripting-xss-vulnerability?_s_id=cve · Note