CVE-2023-40068

CVE-2023-40068: falha em WP Engine Advanced Custom Fields

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Advanced Custom Fields+ Monitorar Advanced Custom Fields PRO

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 2.0%
Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7 allows a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product with the administrative privilege.
Produtos afetados
WP Engine · Advanced Custom FieldsWP Engine · Advanced Custom Fields Pro
CVEs relacionadas — WP Engine Advanced Custom Fields

No mesmo produto, das mais perigosas para as menos.

CVE-2023-30777HIGHWordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)EPSS 39.0%CVE-2024-45429MEDIUMCVE-2024-45429EPSS 0.4%