Lucene search

Rafie Muhammad (Patchstack)PATCHSTACK:C4FE745E07385FAFD1C3B135D76D577A

HistoryJul 18, 2023 - 12:00 a.m.

WordPress RankBear Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

2023-07-1800:00:00

Rafie Muhammad (Patchstack)

patchstack.com

wordpress rankbear plugin

cross site scripting

vulnerable version

patch priority

cve-2023-33999

unauthenticated

owasp top 10

AI Score

6.2

Confidence

Low

JSON

Software

RankBear

Type

Plugin

Vulnerable versions

<= 1.0.0

Fixed in

N/A

OWASP Top 10

A3: Injection

Classification

Cross Site Scripting (XSS)

CVE

CVE-2023-33999

Patch priority

Medium

CVSS severity

Medium (7.1)

Developer

Claim ownership

PSID

013916b233cd

Credits

Rafie Muhammad Patchstack Rafie Muhammad (Patchstack)

Required privilege

Unauthenticated

Published

18 July, 2023

Patchstack.com

Expand full details Have additional information or questions about this entry? Let us know.

Solution

We advise to mitigate or resolve the vulnerability immediately.

Affected configurations

Vulners

Node

-rankbearRange≤1.0.0

VendorProductVersionCPE
-rankbear*cpe:2.3:a:-:rankbear:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
-	rankbear	*	cpe:2.3:a:-:rankbear::::::::

References

patchstack.com/site-wide-reflected-xss-in-freemius-wordpress-sdk-affecting-millions-of-sites/

www.cve.org/CVERecord?id=CVE-2023-33999

AI Score

6.2

Confidence

Low

JSON

Related for PATCHSTACK:C4FE745E07385FAFD1C3B135D76D577A