CVE-2023-40669 in Collapse-O-Matic Plugin

Prediction

by VulDB Data Team • 08/25/2023

A security flaw has been discovered in Collapse-O-Matic Plugin up to 1.8.4 on WordPress. Affected is an unknown function. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 08/18/2023
• Disclosure: 10/25/2023
• Moderation: accepted
• Entry: VDB-238018
• CPE: ready
• CWE: CWE-79 (confirmed)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00328
• KEV: no
• Activities: very low
• Sector: Hostingprovider

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-40669
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-40669
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-40669/