CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0168

The Olevmedia Shortcodes WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 29.1%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2023-0168

Olevmedia » Olevmedia Shortcodes » Version: N/A

cpe:2.3:a:olevmedia:olevmedia_shortcodes:-
Olevmedia » Olevmedia Shortcodes » Version: 1.0.0

cpe:2.3:a:olevmedia:olevmedia_shortcodes:1.0.0
Olevmedia » Olevmedia Shortcodes » Version: 1.1.0

cpe:2.3:a:olevmedia:olevmedia_shortcodes:1.1.0
Olevmedia » Olevmedia Shortcodes » Version: 1.1.1

cpe:2.3:a:olevmedia:olevmedia_shortcodes:1.1.1
Olevmedia » Olevmedia Shortcodes » Version: 1.1.2

cpe:2.3:a:olevmedia:olevmedia_shortcodes:1.1.2
Olevmedia » Olevmedia Shortcodes » Version: 1.1.3

cpe:2.3:a:olevmedia:olevmedia_shortcodes:1.1.3
Olevmedia » Olevmedia Shortcodes » Version: 1.1.4

cpe:2.3:a:olevmedia:olevmedia_shortcodes:1.1.4
Olevmedia » Olevmedia Shortcodes » Version: 1.1.5

cpe:2.3:a:olevmedia:olevmedia_shortcodes:1.1.5
Olevmedia » Olevmedia Shortcodes » Version: 1.1.6

cpe:2.3:a:olevmedia:olevmedia_shortcodes:1.1.6
Olevmedia » Olevmedia Shortcodes » Version: 1.1.7

cpe:2.3:a:olevmedia:olevmedia_shortcodes:1.1.7
Olevmedia » Olevmedia Shortcodes » Version: 1.1.8

cpe:2.3:a:olevmedia:olevmedia_shortcodes:1.1.8
Olevmedia » Olevmedia Shortcodes » Version: 1.1.9

cpe:2.3:a:olevmedia:olevmedia_shortcodes:1.1.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0168

Products

Pricing

Contact Us