CVE-2023-1080

🗓️ 28 Feb 2023 12:52:17Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 106 Views🌐 WEB

The GN Publisher plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to 1.5.5

Reporter	Title	Published	Views	Family All 18
0day.today	WordPress Watu Quiz 3.3.9 / GN Publisher 1.5.5 / Japanized For WooComerce 2.5.4 XSS Vulnerability	23 Mar 202300:00	–	zdt
ATTACKERKB	CVE-2023-1080	28 Feb 202313:15	–	attackerkb
Circl	CVE-2023-1080	28 Feb 202316:29	–	circl
CNNVD	WordPress plugin GN Publisher 跨站脚本漏洞	28 Feb 202300:00	–	cnnvd
Cvelist	CVE-2023-1080 GN Publisher <= 1.5.5 - Reflected Cross-Site Scripting	28 Feb 202312:52	–	cvelist
Nuclei	WordPress GN Publisher <1.5.6 - Cross-Site Scripting	9 Jun 202605:43	–	nuclei
NVD	CVE-2023-1080	28 Feb 202313:15	–	nvd
OSV	CVE-2023-1080	28 Feb 202313:15	–	osv
Packet Storm	WordPress Watu Quiz 3.3.9 / GN Publisher 1.5.5 / Japanized For WooComerce 2.5.4 XSS	23 Mar 202300:00	–	packetstorm
Patchstack	WordPress GN Publisher Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)	1 Mar 202300:00	–	patchstack

NVD

Vulners

Node

gnpublisher gn_publisherRange≤1.5.5wordpress

[
  {
    "vendor": "gnpublisher",
    "product": "GN Publisher: Google News Compatible RSS Feeds",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.5.5",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/blog/2023/03/multiple-reflected-cross-site-scripting-vulnerabilities-in-three-wordpress-plugins-patched/
plugins	www.plugins.trac.wordpress.org/browser/gn-publisher/trunk/templates/settings.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/8a4ee97c-63cd-4a5e-a112-6d4c4c627a57
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/8a4ee97c-63cd-4a5e-a112-6d4c4c627a57

Parameter	Position	Path	Description	CWE
tab	query param	/wp-admin/options-general.php?page=gn-publisher-settings&tab=%22%2F+onmouseover%3Dalert%281%29%3B%2F%2F	Reflected XSS via tab parameter due to insufficient sanitization/output escaping.	CWE-79

08 Apr 2026 18:17Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.1

EPSS0.17362

SSVC

CWE-79