CVE-2023-2488medium

CVE-2023-2488: falha de média gravidade em Stop Spammers Security | Block Spam Users…

Stop Spammers Security < 2023 - Reflected XSS

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Stop Spammers Security | Block Spam Users, Comments, Forms

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.1epss 0.5%
The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape various parameters before outputting them back in admin dashboard pages, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Unknown · Stop Spammers Security | Block Spam Users, Comments, Forms
CVEs relacionadas — Stop Spammers Security | Block Spam Users…

No mesmo produto, das mais perigosas para as menos.

CVE-2022-4120CRITICALStop Spammers Security < 2022.6 - Unauthenticated PHP Object InjectionEPSS 18.1%CVE-2021-24517—Stop Spammers Security < 2021.18 - Authenticated Stored XSSEPSS 0.6%CVE-2023-2489MEDIUMStop Spammers Security < 2023 - Admin+ Stored XSSEPSS 0.4%