Lucene search
HistoryMay 15, 2023 - 1:15 p.m.
CVE-2023-1596
wordpress
plugin
vulnerability
cross-site scripting
high privilege users
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
31.0%
The tagDiv Composer WordPress plugin before 4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected configurations
Node
tagdivcomposerRange<4.0wordpress
Related
cvelist
cvelist
CVE-2023-1596 tagDiv Composer < 4.0 - Reflected Cross-site Scripting
2023-05-15 12:15:36
wpexploit
wpexploit
tagDiv Composer < 4.0 - Reflected Cross-site Scripting
2023-04-24 00:00:00
prion
prion
Cross site scripting
2023-05-15 13:15:00
alpinelinux
alpinelinux
CVE-2023-1596
2023-05-15 13:15:10
wpvulndb
wpvulndb
tagDiv Composer < 4.0 - Reflected Cross-site Scripting
2023-04-24 00:00:00
cve
cve
CVE-2023-1596
2023-05-15 13:15:10
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
31.0%
Related for NVD:CVE-2023-1596