CVE-2023-2399

Summary

The QuBot WordPress plugin before 1.1.6 doesn't filter user input on chat, leading to bad code inserted on it be reflected on the user dashboard.

Affected Software

Weaknesses

• CWE-79 Cross-Site Scripting (XSS)

ADP Enrichment

CVE Program Container

Additional References

• https://wpscan.com/vulnerability/deca3cd3-f7cf-469f-9f7e-3612f7ae514d

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://wpscan.com/vulnerability/deca3cd3-f7cf-469f-9f7e-3612f7ae514d/

References

• https://wpscan.com/vulnerability/deca3cd3-f7cf-469f-9f7e-3612f7ae514d

• ←Previous
• Next→