CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0145

The Saan World Clock WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.9%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2023-0145

Saan » World Clock » Version: N/A

cpe:2.3:a:saan:world_clock:-
Saan » World Clock » Version: 1.1

cpe:2.3:a:saan:world_clock:1.1
Saan » World Clock » Version: 1.2

cpe:2.3:a:saan:world_clock:1.2
Saan » World Clock » Version: 1.3

cpe:2.3:a:saan:world_clock:1.3
Saan » World Clock » Version: 1.4

cpe:2.3:a:saan:world_clock:1.4
Saan » World Clock » Version: 1.5

cpe:2.3:a:saan:world_clock:1.5
Saan » World Clock » Version: 1.7

cpe:2.3:a:saan:world_clock:1.7
Saan » World Clock » Version: 1.8

cpe:2.3:a:saan:world_clock:1.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0145

Products

Pricing

Contact Us