Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2023-5653
HistoryNov 27, 2023 - 5:15 p.m.

Cross site scripting

2023-11-2717:15:00
PRIOn knowledge base
www.prio-n.com
1
wassup
plugin
vulnerability
unauthenticated
stored xss
attacks
admin page

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.3%

JSON

The WassUp Real Time Analytics WordPress plugin through 1.9.4.5 does not escape IP address provided via some headers before outputting them back in an admin page, allowing unauthenticated users to perform Stored XSS attacks against logged in admins

CPENameOperatorVersion
wassup_real_time_analyticsle1.9.4.5

Related

nvd 1
wpvulndb 1
cvelist 1
cve 1
wpexploit 1
nvd
nvd
CVE-2023-5653
2023-11-27 17:15:09
wpvulndb
wpvulndb
WassUp Real Time Analytics <= 1.9.4.5 - Unauthenticated Stored XSS
2023-11-06 00:00:00
cvelist
cvelist
CVE-2023-5653 WassUp Real Time Analytics <= 1.9.4.5 - Unauthenticated Stored XSS
2023-11-27 16:22:01
cve
cve
CVE-2023-5653
2023-11-27 17:15:09
wpexploit
wpexploit
WassUp Real Time Analytics <= 1.9.4.5 - Unauthenticated Stored XSS
2023-11-06 00:00:00

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.3%

JSON
Related for PRION:CVE-2023-5653
nvd1wpvulndb1cvelist1cve1wpexploit1