Lucene search
WpvulndbWPVDB-ID:CD130BB3-8D04-4375-A89A-883AF131ED3AHistoryOct 13, 2023 - 12:00 a.m.
WP 5.6-6.3.1 - Contributor+ Stored XSS via Navigation Block
2023-10-1300:00:00
wpscan.com
16
wordpress
5.6
6.3.1
stored xss
navigation block
contributor
cross-site scripting
Description WordPress does not escape some of its Navigation block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Related
debiancve
debiancve
CVE-2023-38000
2023-10-13 10:15:09
wpvulndb
wpvulndb
Gutenberg < 16.8.1 - Contributor+ Stored XSS via Navigation Links Block
2023-10-13 00:00:00
ubuntucve
ubuntucve
CVE-2023-38000
2023-10-13 00:00:00
osv
osv
BIT-wordpress-2023-38000
2024-03-06 11:09:07
BIT-wordpress-multisite-2023-38000
2024-03-06 11:08:46
CVE-2023-38000
2023-10-13 10:15:09
nvd
nvd
CVE-2023-38000
2023-10-13 10:15:09
cvelist
cvelist
prion
prion
Cross site scripting
2023-10-13 10:15:00
cve
cve
CVE-2023-38000
2023-10-13 10:15:09
veracode
veracode
Cross-Site Scripting (XSS)
2023-11-05 09:14:22
nessus
nessus
WordPress 6.0 < 6.3.2 Multiple Vulnerabilities
2023-10-12 00:00:00
Debian dsa-5685 : wordpress - security update
2024-05-09 00:00:00
openvas
openvas
WordPress Multiple Vulnerabilities (Oct 2023) - Windows
2023-10-13 00:00:00
WordPress Multiple Vulnerabilities (Oct 2023) - Linux
2023-10-13 00:00:00
Debian: Security Advisory (DSA-5685-1)
2024-05-09 00:00:00
debian
debian
[SECURITY] [DSA 5685-1] wordpress security update
2024-05-08 22:06:13
wordfence
wordfence
5.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
42.4%
Related for WPVDB-ID:CD130BB3-8D04-4375-A89A-883AF131ED3A