Cross Site Scripting in WP Githuber MD Plugin by WordPress
CVE-2023-41423

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
WP Githuber Md
Vendor
CVE Published:
12 September 2023

What is CVE-2023-41423?

The WP Githuber MD plugin version 1.16.2 is susceptible to a Cross Site Scripting (XSS) vulnerability, which enables remote attackers to inject and execute arbitrary code through a specially crafted payload. This flaw is particularly concerning as it allows attackers to exploit the 'new article' function, potentially compromising user data and application integrity.

References

https://github.com/terrylinooo/githuber-md/issues/316

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.