PT-2023-19242 · WordPress · Rating-Widget: Star Review System

·

CVE-2023-23831

·

Publicado

2023-06-13

·

Atualizado

2023-06-20

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Rating-Widget: Star Review System plugin versions <= 3.1.9
Description The issue is related to a Stored Cross-Site Scripting (XSS) vulnerability that affects users with contributor or higher permissions. This allows for malicious scripts to be stored on the site, potentially leading to unauthorized actions.
Recommendations For Rating-Widget: Star Review System plugin versions <= 3.1.9, update to a version higher than 3.1.9 to resolve the issue.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-23831

Produtos afetados

Rating-Widget: Star Review System