CVE-2023-47185

Unauth. Stored Cross-Site Scripting XSS vulnerability in gVectors Team Comments — wpDiscuz plugin = 7.6.11 versions...

Cross site scripting

Unauth. Stored Cross-Site Scripting XSS vulnerability in gVectors Team Comments — wpDiscuz plugin = 7.6.11 versions...

CVE-2023-47185

CVE-2023-47185: Unauth. stored XSS in the WordPress wpDiscuz plugin (gVectors Team Comments) affects versions

CVE-2023-47185 WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in gVectors Team Comments — wpDiscuz plugin = 7.6.11 versions...

CVE-2023-47185 WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in gVectors Team Comments — wpDiscuz plugin = 7.6.11 versions...

PT-2023-30351 · WordPress · Wpdiscuz

Name of the Vulnerable Software and Affected Versions: wpDiscuz plugin versions 7.6.11 and earlier Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, which can the...

CVE-2023-47185: Improper Neutralization of Input During Web Page Generation

Unauth. Stored Cross-Site Scripting XSS vulnerability in gVectors Team Comments — wpDiscuz plugin = 7.6.11 versions...

WordPress Plugin Comments - wpDiscuz Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Comments - wpDiscuz A...

WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS)

Software wpDiscuz Type Plugin Vulnerable versions = 7.6.11 Fixed in 7.6.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47185 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 21d23134b1a2 Credits RE-ALTER Required privilege Unauthenticat...

PT-2023-29950 · WordPress · Wpdiscuz

Name of the Vulnerable Software and Affected Versions: wpDiscuz versions 7.6.10 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 7.6.10 and earlier,...

PT-2023-29952

Name of the Vulnerable Software and Affected Versions wpDiscuz versions through 7.6.10 Description The issue is related to improper neutralization of script-related HTML tags in a web page, which allows code injection. This is a basic XSS vulnerability. Recommendations For versions through 7.6.10...

PT-2023-29953 · WordPress · Wpdiscuz

Name of the Vulnerable Software and Affected Versions: Comments – wpDiscuz versions n/a through 7.6.3 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This vulnerability allows for unauthorized access. Recommendations: For versions n/a throug...

WordPress wpDiscuz Plugin < 7.6.4 Multiple IDOR Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gvectors:wpdiscuz"; if description...

WordPress wpDiscuz Plugin <= 7.6.10 is vulnerable to Broken Access Control

Software wpDiscuz Type Plugin Vulnerable versions = 7.6.10 Fixed in 7.6.11 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-46309 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 7f530fb70f0e Credits Revan Arifio Required privilege...

WordPress wpDiscuz Plugin <= 7.6.10 is vulnerable to Content Injection

Software wpDiscuz Type Plugin Vulnerable versions = 7.6.10 Fixed in 7.6.11 OWASP Top 10 A3: Injection Classification Content Injection CVE CVE-2023-46310 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID c4aa65661de4 Credits Revan Arifio Required privilege...

WordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR)

Software wpDiscuz Type Plugin Vulnerable versions = 7.6.3 Fixed in 7.6.4 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-46311 Patch priority Low CVSS severity Low 2.7 Developer Claim ownership PSID 05932cb617e2 Credits Revan Arifio Requir...

CVE-2023-3869

The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the voteOnComment function in versions up to, and including, 7.6.3. This makes it possible for unauthenticated attackers to increase or decrease the rating of a comment...

CVE-2023-3998

The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the userRate function in versions up to, and including, 7.6.3. This makes it possible for unauthenticated attackers to increase or decrease the rating of a post...

CVE-2023-3869

The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the voteOnComment function in versions up to, and including, 7.6.3. This makes it possible for unauthenticated attackers to increase or decrease the rating of a comment...

CVE-2023-3998

The wpDiscuz plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the userRate function in versions up to, and including, 7.6.3. This makes it possible for unauthenticated attackers to increase or decrease the rating of a post...