Lucene search
WpvulndbWPVDB-ID:4FE72FC6-CCB1-4A33-A249-2C2E7DA79C88HistoryOct 13, 2023 - 12:00 a.m.
Gutenberg < 16.8.1 - Contributor+ Stored XSS via Navigation Links Block
2023-10-1300:00:00
wpscan.com
42
gutenberg
plugin
stored xss
navigation links block
contributor role
cross-site scripting
Description The plugin does not escape some of its Navigation block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 16.8.1 |
Related
debiancve
debiancve
CVE-2023-38000
2023-10-13 10:15:09
ubuntucve
ubuntucve
CVE-2023-38000
2023-10-13 00:00:00
osv
osv
BIT-wordpress-2023-38000
2024-03-06 11:09:07
BIT-wordpress-multisite-2023-38000
2024-03-06 11:08:46
CVE-2023-38000
2023-10-13 10:15:09
nvd
nvd
CVE-2023-38000
2023-10-13 10:15:09
wpvulndb
wpvulndb
WP 5.6-6.3.1 - Contributor+ Stored XSS via Navigation Block
2023-10-13 00:00:00
cvelist
cvelist
prion
prion
Cross site scripting
2023-10-13 10:15:00
cve
cve
CVE-2023-38000
2023-10-13 10:15:09
veracode
veracode
Cross-Site Scripting (XSS)
2023-11-05 09:14:22
nessus
nessus
WordPress 6.0 < 6.3.2 Multiple Vulnerabilities
2023-10-12 00:00:00
Debian dsa-5685 : wordpress - security update
2024-05-09 00:00:00
openvas
openvas
WordPress Multiple Vulnerabilities (Oct 2023) - Windows
2023-10-13 00:00:00
WordPress Multiple Vulnerabilities (Oct 2023) - Linux
2023-10-13 00:00:00
Debian: Security Advisory (DSA-5685-1)
2024-05-09 00:00:00
debian
debian
[SECURITY] [DSA 5685-1] wordpress security update
2024-05-08 22:06:13
wordfence
wordfence
5.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
42.4%
Related for WPVDB-ID:4FE72FC6-CCB1-4A33-A249-2C2E7DA79C88