CVE-2023-5749

EmbedPress < 3.9.2 - Reflected XSS

published December 11, 2023

CVSS
—
EPSS
0%
Percentile
38.5
In the wild
Unconfirmed
What it is

The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape user input before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00455 · 38.5th percentile
Published
2023-12-11T19:22Z
EPSS history
Timeline
  • 11 DEC 19:22Z
    EmbedPress < 3.9.2 - Reflected XSS
    cvelistv5