Vulners
Lucene search
3 matches found
CVE-2023-5653
The WassUp Real Time Analytics WordPress plugin through 1.9.4.5 does not escape IP address provided via some headers before outputting them back in an admin page, allowing unauthenticated users to perform Stored XSS attacks against logged in admins...
6.1CVSS5.8AI score0.0051EPSS
Exploits2References1
CVE-2023-5653
CVE-2023-5653 afectar WassUp Real Time Analytics WordPress plugin
6.1CVSS6AI score0.0051EPSS
Exploits2References1Affected Software1
CVE-2023-5653 WassUp Real Time Analytics <= 1.9.4.5 - Unauthenticated Stored XSS
The WassUp Real Time Analytics WordPress plugin through 1.9.4.5 does not escape IP address provided via some headers before outputting them back in an admin page, allowing unauthenticated users to perform Stored XSS attacks against logged in admins...
6.1AI score0.0051EPSS
Exploits2References1
20