CVE-2023-2488

🗓️ 05 Jun 2023 13:38:59Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 60 Views🌐 WEB

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 is prone to Reflected Cross-Site Scripting

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-2488	8 Jan 202517:13	–	circl
CNNVD	WordPress plugin Stop Spammers Security \| Block Spam Users, Comments, Forms 跨站脚本漏洞	5 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-2488 Stop Spammers Security < 2023 - Reflected XSS	5 Jun 202313:38	–	cvelist
EUVD	EUVD-2023-33972	3 Oct 202520:07	–	euvd
NVD	CVE-2023-2488	5 Jun 202314:15	–	nvd
Prion	Cross site scripting	5 Jun 202314:15	–	prion
Positive Technologies	PT-2023-19831 · WordPress · Stop Spammers Security	5 Jun 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-2488	23 May 202503:23	–	redhatcve
Vulnrichment	CVE-2023-2488 Stop Spammers Security < 2023 - Reflected XSS	5 Jun 202313:38	–	vulnrichment
wpexploit	Stop Spammers Security < 2023 - Reflected XSS	15 May 202300:00	–	wpexploit

NVD

Vulners

Node

trumani stop_spammersRange<2023wordpress

[
  {
    "vendor": "Unknown",
    "product": "Stop Spammers Security | Block Spam Users, Comments, Forms",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "2023"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/60226669-0b7b-441f-93d4-b5933e69478f

Parameter	Position	Path	Description	CWE
author	request body	/wp-admin/admin.php?page=ss_diagnostics	Reflected XSS vulnerability due to insufficient sanitization/escaping of input parameters in admin dashboard output	CWE-79
subject	request body	/wp-admin/admin.php?page=ss_diagnostics	Reflected XSS vulnerability due to insufficient sanitization/escaping of input parameters in admin dashboard output	CWE-79

08 Jan 2025 17:15Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

EPSS0.00436

SSVC