Lucene search
+L

3 matches found

NVD
NVD
added 2023/10/20 7:15 a.m.18 views

CVE-2023-4271

The Photospace Responsive plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘psresbuttonsize’ parameter in versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.8CVSS4.4AI score0.00403EPSS
SaveExploits0References3
CVE
CVE
added 2023/10/20 6:35 a.m.45 views

CVE-2023-4271

CVE-2023-4271 affects the WordPress Photospace Responsive Gallery plugin. It is a Stored Cross-Site Scripting (XSS) vulnerability in the psres_button_size parameter, exploitable in versions up to and including 2.1.1 due to insufficient input sanitization and output escaping. Impact requires authe...

4.8CVSS4.9AI score0.00403EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/09/13 12:0 a.m.18 views

WordPress Photospace Responsive Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Photospace Responsive Type Plugin Vulnerable versions = 2.1.1 Fixed in 2.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4271 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8973e183f828 Credits Marco Wotschka...

4.8CVSS6AI score0.00403EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder