Cross-Site Scripting Vulnerability in TS Webfonts for SAKURA by WordPress
CVE-2023-32624

6.1MEDIUM

Key Information:

Vendor

WordPress
Status
Ts Webfonts For Sakura
Vendor
CVE Published:
21 July 2023

What is CVE-2023-32624?

A cross-site scripting vulnerability exists in the TS Webfonts for SAKURA plugin, allowing remote unauthenticated attackers to inject arbitrary scripts. If exploited, this vulnerability can lead to unauthorized actions performed on behalf of users, enabling attackers to steal sensitive information or manipulate the web application.

Affected Version(s)

TS Webfonts for SAKURA 3.1.0 and earlier

References

https://ja.wordpress.org/plugins/ts-webfonts-for-sakura/#...
https://jvn.jp/en/jp/JVN90560760/

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.