CVE-2023-47545

2023-11-1421:15:12

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-47545

authorization

stored xss

cross-site scripting

fatcat apps forms

mailchimp

optin cat

mailchimp list plugin

nvd

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.9%

JSON

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin <= 2.5.4 versions.

Affected configurations

Vulners

NVD

Node

fatcat_appsforms_for_mailchimp_by_optin_cat_–_grow_your_mailchimp_listRange≤2.5.4

CPENameOperatorVersion
fatcatapps:forms_for_mailchimp_by_optin_catfatcatapps forms for mailchimp by optin catle2.5.4

CPE	Name	Operator	Version
fatcatapps:forms_for_mailchimp_by_optin_cat	fatcatapps forms for mailchimp by optin cat	le	2.5.4

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "mailchimp-wp",
    "product": "Forms for Mailchimp by Optin Cat – Grow Your MailChimp List",
    "vendor": "Fatcat Apps",
    "versions": [
      {
        "changes": [
          {
            "at": "2.5.5",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.5.4",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/mailchimp-wp/wordpress-forms-for-mailchimp-by-optin-cat-plugin-2-5-4-cross-site-scripting-xss-vulnerability?_s_id=cve