CVE-2023-5620

Webpushr < 4.35.0 - Unauthenticated Stored XSS

published November 27, 2023

CVSS
—
EPSS
0%
Percentile
35.8
In the wild
Unconfirmed
What it is

The Web Push Notifications WordPress plugin before 4.35.0 does not prevent visitors on the site from changing some of the plugin options, some of which may be used to conduct Stored XSS attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00426 · 35.8th percentile
Published
2023-11-27T16:22Z
EPSS history
Timeline
  • 27 NOV 16:22Z
    Webpushr < 4.35.0 - Unauthenticated Stored XSS
    cvelistv5