WordPress Order Your Posts Manually Plugin <= 2.2.5 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32510

7.1HIGH

Key Information:

Vendor
WordPress
Status
Order Your Posts Manually
Vendor
CVE Published:
24 August 2023

Summary

The Order Your Posts Manually plugin, developed by Rolf van Gelder, contains a reflected cross-site scripting vulnerability in versions 2.2.5 and below. This security flaw allows attackers to inject malicious scripts into web pages that are then displayed to users. If exploited, this vulnerability can compromise user sessions, steal sensitive information, or redirect users to unintended sites, thereby posing significant risks to website integrity.

Affected Version(s)

Order Your Posts Manually <= 2.2.5

References

https://patchstack.com/database/vulnerability/order-your-...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

minhtuanact (Patchstack Alliance)
.