Vulnerability Details CVE-2023-25464
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in StreamWeasels Twitch Player plugin <= 2.1.0 versions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.8%
CVSS Severity
CVSS v3 Score 5.9
References
- https://patchstack.com/database/vulnerability/ttv-easy-embed-player/wordpress-twitch-player-plugin-2-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
- https://patchstack.com/database/vulnerability/ttv-easy-embed-player/wordpress-twitch-player-plugin-2-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
Products affected by CVE-2023-25464
-
cpe:2.3:a:streamweasels:twitch_player:-
-
cpe:2.3:a:streamweasels:twitch_player:2.0.9
-
cpe:2.3:a:streamweasels:twitch_player:2.1.0