Lucene search

CVE-2023-0061

🗓️ 13 Feb 2023 15:20:15Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 44 Views🌐 WEB

The Judge.me Product Reviews for WooCommerce WordPress plugin before 1.3.21 is prone to Stored XSS

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 7
WPVulnDB	Judge.me Product Reviews for WooCommerce < 1.3.21 - Contributor+ Stored XSS	17 Jan 202300:00	–	wpvulndb
wpexploit	Judge.me Product Reviews for WooCommerce < 1.3.21 - Contributor+ Stored XSS	17 Jan 202300:00	–	wpexploit
Vulnrichment	CVE-2023-0061 Judge.me Product Reviews for WooCommerce < 1.3.21 - Contributor+ Stored XSS	13 Feb 202314:32	–	vulnrichment
Prion	Cross site scripting	13 Feb 202315:15	–	prion
Patchstack	WordPress Judge.me Product Reviews for WooCommerce Plugin < 1.3.21 is vulnerable to Cross Site Scripting (XSS)	17 Jan 202300:00	–	patchstack
NVD	CVE-2023-0061	13 Feb 202315:15	–	nvd
Cvelist	CVE-2023-0061 Judge.me Product Reviews for WooCommerce < 1.3.21 - Contributor+ Stored XSS	13 Feb 202314:32	–	cvelist

Nvd

Vulners

Node

judge product_reviews_for_woocommerceRange<1.3.21wordpress

[
  {
    "vendor": "Unknown",
    "product": "Judge.me Product Reviews for WooCommerce",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "1.3.21"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/a1d0d131-c773-487e-88f8-e3d63936fbbb

Parameter	Position	Path	Description	CWE
all-reviews-page	request body	/jgm-feature-carousel	Stored Cross-Site Scripting vulnerability due to lack of validation and escaping of shortcode attributes.	CWE-80

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Feb 2023 15:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS35.4

EPSS0.00291

SSVC