Lucene search
Rafie Muhammad (Patchstack)PATCHSTACK:92F149144C6D60B88F3A90DEF70A6150HistoryJul 19, 2023 - 12:00 a.m.
WordPress WP Scrive by Webbstart Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)
2023-07-1900:00:00
Rafie Muhammad (Patchstack)
patchstack.com
1
wordpress
scrive
webbstart
plugin
cross site scripting
cve-2023-33999
patchstack
unauthenticated
AI Score
6.2
Confidence
Low
Software
WP Scrive by Webbstart
Type
Plugin
Vulnerable versions
<= 1.2.3
Fixed in
1.2.4
OWASP Top 10
A3: Injection
Classification
Cross Site Scripting (XSS)
CVE
CVE-2023-33999
Patch priority
High
CVSS severity
High (7.1)
Developer
Claim ownership
PSID
05d2a99ee0f5
Credits
Rafie Muhammad (Patchstack)
Required privilege
Unauthenticated
Published
19 July, 2023
Expand full details Have additional information or questions about this entry? Let us know.
Solution
We advise to mitigate or resolve the vulnerability immediately.
Affected configurations
Node
-wp_scrive_by_webbstartRangeโค1.2.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| - | wp_scrive_by_webbstart | * | cpe:2.3:a:-:wp_scrive_by_webbstart:*:*:*:*:*:*:*:* |
Related
wpvulndb
wpvulndb
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
2023-07-25 00:00:00
patchstack
patchstack