Lucene search

K
cvelistPatchstackCVELIST:CVE-2023-46613
HistoryNov 08, 2023 - 3:12 p.m.

CVE-2023-46613 WordPress Add to Calendar Button Plugin < 1.5.1 is vulnerable to Cross Site Scripting (XSS)

2023-11-0815:12:50
CWE-79
Patchstack
www.cve.org
cve-2023-46613
cross site scripting
wordpress
add to calendar button plugin
jens kuerschner
stored xss
authentication bypass

0.0004 Low

EPSS

Percentile

14.0%

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Jens Kuerschner Add to Calendar Button plugin <=Β 1.5.1 versions.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "add-to-calendar-button",
    "product": "Add to Calendar Button",
    "vendor": "Jens Kuerschner",
    "versions": [
      {
        "changes": [
          {
            "at": "1.5.1",
            "status": "unaffected"
          }
        ],
        "lessThan": "1.5.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

0.0004 Low

EPSS

Percentile

14.0%

Related for CVELIST:CVE-2023-46613