CVE-2023-22685

2023-05-1216:15:09

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-22685

admin access

cross-site scripting

tips and tricks hq

ruhul amin

rss feed subscription

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

17.7%

JSON

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.2 versions.

Affected configurations

NVD

Node

tipsandtricks-hqcategory_specific_rss_feed_subscriptionRange≤2.2wordpress

References

patchstack.com/database/vulnerability/category-specific-rss-feed-menu/wordpress-category-specific-rss-feed-subscription-plugin-v2-2-cross-site-scripting-xss-vulnerability?_s_id=cve