Lucene search
HistoryApr 03, 2023 - 3:15 p.m.
CVE-2023-1377
solidres
wordpress
reflected cross-site scripting
high privilege users
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
35.4%
The Solidres WordPress plugin through 0.9.4 does not sanitise and escape numerous parameter before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected configurations
Node
solidressolidresRange≤0.9.4wordpress
Related
cvelist
cvelist
CVE-2023-1377 Solidres <= 0.9.4 - Multiple Reflected XSS
2023-04-03 14:38:28
cve
cve
CVE-2023-1377
2023-04-03 15:15:19
wpvulndb
wpvulndb
Solidres <= 0.9.4 - Multiple Reflected XSS
2023-03-13 00:00:00
prion
prion
Cross site scripting
2023-04-03 15:15:00
wpexploit
wpexploit
Solidres <= 0.9.4 - Multiple Reflected XSS
2023-03-13 00:00:00
wordfence
wordfence
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
35.4%
Related for NVD:CVE-2023-1377