CVE-2023-0992 in Shield Security Plugin信息

摘要

由 MITRE • 2023-06-09

The Shield Security plugin for WordPress is vulnerable to stored Cross-Site Scripting in versions up to, and including, 17.0.17 via the 'User-Agent' header. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2023-02-23

披露

2023-06-09

管理

已接受

条目

VDB-227397

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

6.1 (NVD)

EPSS

0.93046

KEV

否

活动

非常低

部门

Hostingprovider

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2023-0992
NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-0992
CVE Details	https://www.cvedetails.com/cve/CVE-2023-0992/

◂ 上一步一览下一步 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!