CVE-2023-25479

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Podlove Podlove Subscribe button plugin = 1.3.7 versions...

CVE-2023-25479

creationtimestamp| type| source ---|---|--- 2023-04-25 16:25:20+00:00| seen| https://t.me/cibsecurity/62804...

CVE-2023-25479

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Podlove Podlove Subscribe button plugin = 1.3.7 versions...

CVE-2023-25479

CVE-2023-25479 affects the WordPress plugin Podlove Subscribe Button . The vulnerability is a Stored XSS in versions ≤ 1.3.7 that requires authentication with admin+ privileges. Public exploitation details are not provided in the documents, but the issue is mitigated by upgrading to a fixed relea...

WordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)

Software Podlove Subscribe button Type Plugin Vulnerable versions = 1.3.7 Fixed in 1.3.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25479 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID ce8b8c58ff2d Credits yuyudhn Requir...