PT-2023-18656 · WordPress · Wordpress Download Manager Gutenberg Blocks

István Márton

+1

·

CVE-2023-22713

·

Publicado

2023-05-03

·

Atualizado

2023-05-06

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions WordPress Download Manager Gutenberg Blocks by WordPress Download Manager plugin versions <= 2.1.8
Description The issue is related to an Authenticated Cross-Site Scripting (XSS) vulnerability. This means that an attacker with contributor or higher privileges can inject malicious scripts into the website, potentially leading to unauthorized actions.
Recommendations For WordPress Download Manager Gutenberg Blocks by WordPress Download Manager plugin versions <= 2.1.8, update to a version higher than 2.1.8 to resolve the issue.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-22713

Produtos afetados

Wordpress Download Manager Gutenberg Blocks