PT-2023-29378
CVE-2023-45059
·
Published
2023-10-03
·
Updated
2023-10-25
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Gumroad plugin versions <= 3.1.0
Description
The issue is related to a Stored Cross-Site Scripting (XSS) vulnerability that affects the Gumroad plugin. This vulnerability requires authentication and is limited to users with contributor or higher permissions.
Recommendations
For Gumroad plugin versions <= 3.1.0, update to a version higher than 3.1.0 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾