PT-2023-14211 · Code Tides · Code Tides Advanced Floating Content Plugin
CVSS v3.1
5.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Code Tides Advanced Floating Content plugin versions 1.2.1 and earlier
Description
The issue is related to a Cross-Site Scripting (XSS) vulnerability that affects users with contributor or higher permissions. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized actions or data theft.
Recommendations
For Code Tides Advanced Floating Content plugin versions 1.2.1 and earlier, update to a version later than 1.2.1 to resolve the issue.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Code Tides Advanced Floating Content Plugin