Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-38000HistoryOct 13, 2023 - 10:15 a.m.
CVE-2023-38000
2023-10-1310:15:09
Debian Security Bug Tracker
security-tracker.debian.org
40
cve-2023-38000
authentication
stored
cross-site scripting
wordpress
gutenberg
unix
vulnerability
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
0.001 Low
EPSS
Percentile
42.4%
Auth. Stored (contributor+) Cross-Site Scripting (XSS) vulnerability in WordPress core 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.1.3, from 6.0 through 6.0.5, from 5.9 through 5.9.7 and Gutenberg plugin <= 16.8.0 versions.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | wordpress | < 6.1.6+dfsg1-0+deb12u1 | wordpress_6.1.6+dfsg1-0+deb12u1_all.deb |
| Debian | 11 | all | wordpress | < 5.7.8+dfsg1-0+deb11u2 | wordpress_5.7.8+dfsg1-0+deb11u2_all.deb |
| Debian | 10 | all | wordpress | < 5.0.15+dfsg1-0+deb10u1 | wordpress_5.0.15+dfsg1-0+deb10u1_all.deb |
| Debian | 999 | all | wordpress | < 6.3.2+dfsg1-1 | wordpress_6.3.2+dfsg1-1_all.deb |
| Debian | 13 | all | wordpress | < 6.3.2+dfsg1-1 | wordpress_6.3.2+dfsg1-1_all.deb |
Related
wpvulndb
wpvulndb
Gutenberg < 16.8.1 - Contributor+ Stored XSS via Navigation Links Block
2023-10-13 00:00:00
WP 5.6-6.3.1 - Contributor+ Stored XSS via Navigation Block
2023-10-13 00:00:00
ubuntucve
ubuntucve
CVE-2023-38000
2023-10-13 00:00:00
osv
osv
BIT-wordpress-2023-38000
2024-03-06 11:09:07
BIT-wordpress-multisite-2023-38000
2024-03-06 11:08:46
CVE-2023-38000
2023-10-13 10:15:09
nvd
nvd
CVE-2023-38000
2023-10-13 10:15:09
cvelist
cvelist
prion
prion
Cross site scripting
2023-10-13 10:15:00
cve
cve
CVE-2023-38000
2023-10-13 10:15:09
veracode
veracode
Cross-Site Scripting (XSS)
2023-11-05 09:14:22
nessus
nessus
WordPress 6.0 < 6.3.2 Multiple Vulnerabilities
2023-10-12 00:00:00
Debian dsa-5685 : wordpress - security update
2024-05-09 00:00:00
openvas
openvas
WordPress Multiple Vulnerabilities (Oct 2023) - Windows
2023-10-13 00:00:00
WordPress Multiple Vulnerabilities (Oct 2023) - Linux
2023-10-13 00:00:00
Debian: Security Advisory (DSA-5685-1)
2024-05-09 00:00:00
debian
debian
[SECURITY] [DSA 5685-1] wordpress security update
2024-05-08 22:06:13
wordfence
wordfence
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
0.001 Low
EPSS
Percentile
42.4%
Related for DEBIANCVE:CVE-2023-38000