Lucene search

Rio DarmawanPATCHSTACK:8192A4E954E5AC005676E7631252403E

HistoryFeb 23, 2023 - 12:00 a.m.

WordPress WPMobile.App Plugin <= 11.18 is vulnerable to Cross Site Scripting (XSS)

2023-02-2300:00:00

Rio Darmawan

patchstack.com

wordpress

wpmobile.app

plugin

cross site scripting

vulnerable

11.18

fixed

11.19

owasp top 10

amauri.io

cve-2023-26010

low

administrator

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

AI Score

Confidence

High

EPSS

0.001

Percentile

19.8%

JSON

Software

WPMobile.App

Type

Plugin

Vulnerable versions

<= 11.18

Fixed in

11.19

OWASP Top 10

A7: Cross-Site Scripting (XSS)

Classification

Cross Site Scripting (XSS)

CVE

CVE-2023-26010

Patch priority

Low

CVSS severity

Low (5.9)

Developer

Amauri.IO

PSID

1df640e0b828

Credits

Rio Darmawan

Required privilege

Administrator

Published

23 February, 2023

Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners

Node

wpmobile.appwpmobile.appRange≤11.18

VendorProductVersionCPE
wpmobile.appwpmobile.app*cpe:2.3:a:wpmobile.app:wpmobile.app:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wpmobile.app	wpmobile.app	*	cpe:2.3:a:wpmobile.app:wpmobile.app::::::::

References

wordpress.org/plugins/wpappninja/#developers

www.cve.org/CVERecord?id=CVE-2023-26010