Lucene search
HistoryJul 31, 2023 - 10:15 a.m.
CVE-2023-0602
cve-2023-0602
twittee plugin
xss
reflected attack
administrators
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
41.7%
The Twittee Text Tweet WordPress plugin through 1.0.8 does not properly escape POST values which are printed back to the user inside one of the plugin’s administrative page, which allows reflected XSS attacks targeting administrators to happen.
Affected configurations
Node
johnniejodelljrtwittee_text_tweetRange≤1.0.8wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| johnniejodelljr | twittee_text_tweet | * | cpe:2.3:a:johnniejodelljr:twittee_text_tweet:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Cross site scripting
2023-07-31 10:15:00
cvelist
cvelist
CVE-2023-0602 Twittee Text Tweet <= 1.0.8 - Reflected XSS
2023-07-31 09:37:33
cve
cve
CVE-2023-0602
2023-07-31 10:15:10
nuclei
nuclei
Twittee Text Tweet <= 1.0.8 - Cross-Site Scripting
2023-10-17 07:20:28
wordfence
wordfence
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
41.7%
Related for NVD:CVE-2023-0602