CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0389

The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 33.4%

CVSS Severity

CVSS v3 Score 4.8

References

Products affected by CVE-2023-0389

Codepeople » Calculated Fields Form » Version: 1.0.346

cpe:2.3:a:codepeople:calculated_fields_form:1.0.346
Codepeople » Calculated Fields Form » Version: 1.0.347

cpe:2.3:a:codepeople:calculated_fields_form:1.0.347
Codepeople » Calculated Fields Form » Version: 1.0.348

cpe:2.3:a:codepeople:calculated_fields_form:1.0.348
Codepeople » Calculated Fields Form » Version: 1.0.349

cpe:2.3:a:codepeople:calculated_fields_form:1.0.349
Codepeople » Calculated Fields Form » Version: 1.0.350

cpe:2.3:a:codepeople:calculated_fields_form:1.0.350
Codepeople » Calculated Fields Form » Version: 1.0.351

cpe:2.3:a:codepeople:calculated_fields_form:1.0.351
Codepeople » Calculated Fields Form » Version: 1.0.352

cpe:2.3:a:codepeople:calculated_fields_form:1.0.352
Codepeople » Calculated Fields Form » Version: 1.0.353

cpe:2.3:a:codepeople:calculated_fields_form:1.0.353
Codepeople » Calculated Fields Form » Version: 1.0.354

cpe:2.3:a:codepeople:calculated_fields_form:1.0.354
Codepeople » Calculated Fields Form » Version: 1.0.355

cpe:2.3:a:codepeople:calculated_fields_form:1.0.355
Codepeople » Calculated Fields Form » Version: 1.1.119

cpe:2.3:a:codepeople:calculated_fields_form:1.1.119
Codepeople » Calculated Fields Form » Version: 1.1.120

cpe:2.3:a:codepeople:calculated_fields_form:1.1.120
Codepeople » Calculated Fields Form » Version: 1.1.121

cpe:2.3:a:codepeople:calculated_fields_form:1.1.121
Codepeople » Calculated Fields Form » Version: 1.1.122

cpe:2.3:a:codepeople:calculated_fields_form:1.1.122
Codepeople » Calculated Fields Form » Version: 1.1.123

cpe:2.3:a:codepeople:calculated_fields_form:1.1.123
Codepeople » Calculated Fields Form » Version: 1.1.124

cpe:2.3:a:codepeople:calculated_fields_form:1.1.124
Codepeople » Calculated Fields Form » Version: 1.1.125

cpe:2.3:a:codepeople:calculated_fields_form:1.1.125
Codepeople » Calculated Fields Form » Version: 1.1.126

cpe:2.3:a:codepeople:calculated_fields_form:1.1.126
Codepeople » Calculated Fields Form » Version: 1.1.127

cpe:2.3:a:codepeople:calculated_fields_form:1.1.127
Codepeople » Calculated Fields Form » Version: 1.1.128

cpe:2.3:a:codepeople:calculated_fields_form:1.1.128
Codepeople » Calculated Fields Form » Version: 1.1.129

cpe:2.3:a:codepeople:calculated_fields_form:1.1.129
Codepeople » Calculated Fields Form » Version: 1.1.130

cpe:2.3:a:codepeople:calculated_fields_form:1.1.130
Codepeople » Calculated Fields Form » Version: 1.1.131

cpe:2.3:a:codepeople:calculated_fields_form:1.1.131
Codepeople » Calculated Fields Form » Version: 1.1.132

cpe:2.3:a:codepeople:calculated_fields_form:1.1.132
Codepeople » Calculated Fields Form » Version: 1.1.133

cpe:2.3:a:codepeople:calculated_fields_form:1.1.133
Codepeople » Calculated Fields Form » Version: 1.1.134

cpe:2.3:a:codepeople:calculated_fields_form:1.1.134
Codepeople » Calculated Fields Form » Version: 1.1.135

cpe:2.3:a:codepeople:calculated_fields_form:1.1.135
Codepeople » Calculated Fields Form » Version: 1.1.136

cpe:2.3:a:codepeople:calculated_fields_form:1.1.136
Codepeople » Calculated Fields Form » Version: 1.1.137

cpe:2.3:a:codepeople:calculated_fields_form:1.1.137
Codepeople » Calculated Fields Form » Version: 1.1.138

cpe:2.3:a:codepeople:calculated_fields_form:1.1.138
Codepeople » Calculated Fields Form » Version: 1.1.139

cpe:2.3:a:codepeople:calculated_fields_form:1.1.139
Codepeople » Calculated Fields Form » Version: 1.1.140

cpe:2.3:a:codepeople:calculated_fields_form:1.1.140
Codepeople » Calculated Fields Form » Version: 1.1.141

cpe:2.3:a:codepeople:calculated_fields_form:1.1.141
Codepeople » Calculated Fields Form » Version: 1.1.142

cpe:2.3:a:codepeople:calculated_fields_form:1.1.142
Codepeople » Calculated Fields Form » Version: 1.1.143

cpe:2.3:a:codepeople:calculated_fields_form:1.1.143
Codepeople » Calculated Fields Form » Version: 1.1.144

cpe:2.3:a:codepeople:calculated_fields_form:1.1.144
Codepeople » Calculated Fields Form » Version: 1.1.145

cpe:2.3:a:codepeople:calculated_fields_form:1.1.145
Codepeople » Calculated Fields Form » Version: 1.1.146

cpe:2.3:a:codepeople:calculated_fields_form:1.1.146
Codepeople » Calculated Fields Form » Version: 1.1.147

cpe:2.3:a:codepeople:calculated_fields_form:1.1.147
Codepeople » Calculated Fields Form » Version: 1.1.148

cpe:2.3:a:codepeople:calculated_fields_form:1.1.148
Codepeople » Calculated Fields Form » Version: 1.1.149

cpe:2.3:a:codepeople:calculated_fields_form:1.1.149
Codepeople » Calculated Fields Form » Version: 1.1.150

cpe:2.3:a:codepeople:calculated_fields_form:1.1.150

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0389

Products

Pricing

Contact Us