Lucene search
WPScanCVELIST:CVE-2023-0644HistoryMay 15, 2023 - 12:15 p.m.
CVE-2023-0644 PushAssist <= 3.0.8 - Reflected Cross-Site Scripting
2023-05-1512:15:40
WPScan
www.cve.org
1
cve-2023-0644
push notifications
sanitisation
cross-site scripting
wordpress plugin
high privilege users
EPSS
0.001
Percentile
31.0%
The Push Notifications for WordPress by PushAssist WordPress plugin through 3.0.8 does not sanitise and escape various parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CNA Affected
[
{
"vendor": "Unknown",
"product": "Push Notifications for WordPress by PushAssist",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThanOrEqual": "3.0.8"
}
],
"defaultStatus": "affected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
prion
prion
Cross site scripting
2023-05-15 13:15:00
cve
cve
CVE-2023-0644
2023-05-15 13:15:09
ubuntucve
ubuntucve
CVE-2023-0644
2023-05-15 00:00:00
debiancve
debiancve
CVE-2023-0644
1976-01-01 00:00:00
nvd
nvd
CVE-2023-0644
2023-05-15 13:15:09
wordfence
wordfence