Lucene search

WordPress External Media Upload Plugin <= 0.3 is vulnerable to Cross Site Scripting (XSS)

🗓️ 19 Jul 2023 00:00:00Reported by Rafie Muhammad (Patchstack)Type

WordPress External Media Upload Plugin <= 0.3 vulnerable to Cross Site Scripting (XSS). Patch in version 0.4

Reporter	Title	Published	Views	Family All 199
Patchstack	WordPress Food Store – Online Food Delivery & Pickup Plugin <= 1.4.7.4 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Post Grid, Image Gallery & Portfolio for Elementor \| PowerFolio Plugin < 3.0.3 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Shortcodes Ultimate Plugin <= 5.13.0 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Pods Plugin <= 2.7.31 is vulnerable to Cross Site Scripting (XSS)	19 Jul 202300:00	–	patchstack
Patchstack	WordPress Custom Login Page Customizer Plugin <= 2.2.2 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress ActiveCampaign Email Preference Center Plugin < 2.0.12 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress ï»¿ WP Nice Accordion - Best FAQ Accordion Plugin for WordPress Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress SKT Templates – Elementor & Gutenberg templates Plugin < 5.0.2 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Client Invoicing by Sprout Invoices Plugin <= 19.0 is vulnerable to Cross Site Scripting (XSS)	19 Jul 202300:00	–	patchstack
Patchstack	WordPress Display Data on your site! Create Dynamic Content Templates from any form of data. Works with ACF, Pods, BuddyPress/ BuddyBoss Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)	19 Jul 202300:00	–	patchstack

Vulners

Node

external_media_project external_mediaRange≤0.3wordpress

Source	Link
cve	www.cve.org/CVERecord
patchstack	www.patchstack.com/site-wide-reflected-xss-in-freemius-wordpress-sdk-affecting-millions-of-sites/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Jul 2023 00:00Current

6.0Medium risk

Vulners AI Score6.0

wordpress; media upload; cross site scripting; vulnerability; patch; owasp; cve-2023-33999; patchstack; unauthenticated; security; injection