CVE-2023-41661

2023-09-2914:15:10

Google

osv.dev

cve-2023-41661

stored cross-site scripting

authenticated

presspage entertainment inc

wordpress plugin

version 3.1.35

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

JSON

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PressPage Entertainment Inc. Smarty for WordPress plugin <= 3.1.35 versions.

CPENameOperatorVersion
smartyeq3.1.21
smartyeq3.1.26
smartyeq3.1.32
smartyeq3.1.34
smartyeq3.1.35
smartyeq2.6.28
smartyeq3.1.17
smartyeq3.1.13
smartyeq3.1.16
smartyeq2.6.27

Name	Operator	Version
smarty	eq	3.1.21
smarty	eq	3.1.26
smarty	eq	3.1.32
smarty	eq	3.1.34
smarty	eq	3.1.35
smarty	eq	2.6.28
smarty	eq	3.1.17
smarty	eq	3.1.13
smarty	eq	3.1.16
smarty	eq	2.6.27

Rows per page:

1-10 of 291

References

patchstack.com/database/vulnerability/smarty-for-wordpress/wordpress-smarty-for-wordpress-plugin-3-1-35-cross-site-scripting-xss-vulnerability?_s_id=cve