PT-2023-31707 · Unknown · Upsolution Impreza

·

CVE-2023-50893

·

Publicado

2023-12-29

·

Atualizado

2024-01-05

CVSS v3.1

7.1

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions UpSolution Impreza – WordPress Website and WooCommerce Builder versions n/a through 8.17.4
Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This can be exploited by attackers to inject malicious scripts into web pages.
Recommendations For versions n/a through 8.17.4, update to a version later than 8.17.4 to resolve the issue. At the moment, there is no information about additional mitigation measures.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-50893

Produtos afetados

Upsolution Impreza