Vulnerability Details CVE-2023-38516
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP OnlineSupport, Essential Plugin Audio Player with Playlist Ultimate plugin <= 1.2.2 versions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.9%
CVSS Severity
CVSS v3 Score 6.5
References
- https://patchstack.com/database/vulnerability/audio-player-with-playlist-ultimate/wordpress-audio-player-with-playlist-ultimate-plugin-1-2-2-cross-site-scripting-xss?_s_id=cve
- https://patchstack.com/database/vulnerability/audio-player-with-playlist-ultimate/wordpress-audio-player-with-playlist-ultimate-plugin-1-2-2-cross-site-scripting-xss?_s_id=cve
Products affected by CVE-2023-38516
-
cpe:2.3:a:essentialplugin:audio_player_with_playlist_ultimate:-
-
cpe:2.3:a:essentialplugin:audio_player_with_playlist_ultimate:1.0
-
cpe:2.3:a:essentialplugin:audio_player_with_playlist_ultimate:1.1
-
cpe:2.3:a:essentialplugin:audio_player_with_playlist_ultimate:1.1.2
-
cpe:2.3:a:essentialplugin:audio_player_with_playlist_ultimate:1.1.3
-
cpe:2.3:a:essentialplugin:audio_player_with_playlist_ultimate:1.1.4
-
cpe:2.3:a:essentialplugin:audio_player_with_playlist_ultimate:1.1.5
-
cpe:2.3:a:essentialplugin:audio_player_with_playlist_ultimate:1.1.6
-
cpe:2.3:a:essentialplugin:audio_player_with_playlist_ultimate:1.2
-
cpe:2.3:a:essentialplugin:audio_player_with_playlist_ultimate:1.2.1
-
cpe:2.3:a:essentialplugin:audio_player_with_playlist_ultimate:1.2.2