CVE-2023-47517

2023-11-1423:15:11

Google

osv.dev

cve-2023-47517

vulnerability

sendpress plugin

cross-site scripting

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.23.11.6 versions.

CPENameOperatorVersion
sendpresseq0.9.9.3
sendpresseq1.1.6.23
sendpresseq1.10.8.14
sendpresseq0.9.2-Beta
sendpresseq1.9.10.15
sendpresseq1.8.12.18
sendpresseq1.7.6.17
sendpresseq1.1.2.24
sendpresseq1.5.12.20
sendpresseq1.7.7.27

Name	Operator	Version
sendpress	eq	0.9.9.3
sendpress	eq	1.1.6.23
sendpress	eq	1.10.8.14
sendpress	eq	0.9.2-Beta
sendpress	eq	1.9.10.15
sendpress	eq	1.8.12.18
sendpress	eq	1.7.6.17
sendpress	eq	1.1.2.24
sendpress	eq	1.5.12.20
sendpress	eq	1.7.7.27

Rows per page:

1-10 of 2171

References

patchstack.com/database/vulnerability/sendpress/wordpress-sendpress-newsletters-plugin-1-22-3-31-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve