CVE-2023-3492

Katalog CVE

CVSS 6.8 · Medium EPSS 0,40%

Kerentanan pada cmscommander wp shopping pages. Skor CVSS 3.1 6.8 (Medium) menurut NVD.

Deskripsi (NVD)

The WP Shopping Pages WordPress plugin through 1.14 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

Rincian

Terbit di NVD

7 Agustus 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.8 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 31,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/01b9b1c2-439e-44df-bf01-026cb13d7d40 exploit · advisory pihak ketiga