CVE-2023-2272

Tiempo.com <= 0.1.2 - Reflected XSS

published August 16, 2023

CVSS
—
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

The Tiempo.com WordPress plugin through 0.1.2 does not sanitise and escape the page parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00850 · 57.8th percentile
Published
2023-08-16T11:03Z
EPSS history
Timeline
  • 16 AUG 11:03Z
    Tiempo.com <= 0.1.2 - Reflected XSS
    cvelistv5