CVE-2023-51415: falha de média gravidade em GiveWP – Donation Plugin and Fundraising…
WordPress GiveWP Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.3%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform allows Stored XSS.This issue affects GiveWP – Donation Plugin and Fundraising Platform: from n/a through 3.2.2.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
GiveWP · GiveWP – Donation Plugin and Fundraising PlatformCVEs relacionadas — GiveWP – Donation Plugin and Fundraising…
No mesmo produto, das mais perigosas para as menos.
CVE-2021-24213—GiveWP < 2.10.0 - Reflected Cross Site Scripting (XSS)EPSS 1.4%CVE-2021-24315—Give WP < 2.10.4 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.7%CVE-2023-32513HIGHWordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object InjectionEPSS 0.6%CVE-2022-40312MEDIUMWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF)EPSS 0.4%CVE-2023-25450MEDIUMWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%