Lucene search
WPScanCVE-2023-0422HistoryApr 10, 2023 - 2:15 p.m.
CVE-2023-0422
2023-04-1014:15:08
WPScan
web.nvd.nist.gov
31
article directory
wordpress
plugin
security
vulnerability
cve-2023-0422
xss
stored xss
administration panel
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
21.4%
The Article Directory WordPress plugin through 1.3 does not properly sanitize the publish_terms_text setting before displaying it in the administration panel, which may enable administrators to conduct Stored XSS attacks in multisite contexts.
Affected configurations
Node
article_directory_projectarticle_directoryRange≤1.3wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| article_directory_project | article_directory | * | cpe:2.3:a:article_directory_project:article_directory:*:*:*:*:*:wordpress:*:* |
CNA Affected
[
{
"vendor": "Unknown",
"product": "Article Directory",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThanOrEqual": "1.3"
}
],
"defaultStatus": "affected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
wpexploit
wpexploit
Article Directory <= 1.3 - Admin+ Stored XSS
2023-03-17 00:00:00
nvd
nvd
CVE-2023-0422
2023-04-10 14:15:08
wpvulndb
wpvulndb
Article Directory <= 1.3 - Admin+ Stored XSS
2023-03-17 00:00:00
cvelist
cvelist
CVE-2023-0422 Article Directory <= 1.3 - Admin+ Stored XSS
2023-04-10 13:18:01
prion
prion
Cross site scripting
2023-04-10 14:15:00
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
21.4%
Related for CVE-2023-0422