PT-2023-15303 · Ulf Benjaminsson · Wp-Dtree
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Ulf Benjaminsson WP-dTree plugin versions <= 4.4.5
Description
The issue is related to a Stored Cross-Site Scripting (XSS) vulnerability that requires authentication with admin+ privileges.
Recommendations
For Ulf Benjaminsson WP-dTree plugin versions <= 4.4.5, update to a version higher than 4.4.5 to resolve the issue.
At the moment, there is no information about other mitigation measures.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wp-Dtree