PT-2023-14211 · Code Tides · Code Tides Advanced Floating Content Plugin

·

CVE-2022-43458

·

Publicado

2023-04-16

·

Atualizado

2023-04-21

CVSS v3.1

5.4

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Code Tides Advanced Floating Content plugin versions 1.2.1 and earlier
Description The issue is related to a Cross-Site Scripting (XSS) vulnerability that affects users with contributor or higher permissions. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized actions or data theft.
Recommendations For Code Tides Advanced Floating Content plugin versions 1.2.1 and earlier, update to a version later than 1.2.1 to resolve the issue.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2022-43458

Produtos afetados

Code Tides Advanced Floating Content Plugin