CVE-2023-5211

Fattura24 < 6.2.8 - Reflected Cross-Site Scripting

Medium · published October 31, 2023

CVSS v3.1
6.1
EPSS
0%
Percentile
38.7
In the wild
Unconfirmed
What it is

The Fattura24 WordPress plugin before 6.2.8 does not sanitize or escape the 'id' parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting vulnerability.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00458 · 38.7th percentile
Published
2023-10-31T13:54Z
EPSS history
Timeline
  • 31 OCT 13:54Z
    Fattura24 < 6.2.8 - Reflected Cross-Site Scripting
    cvelistv5