CVEDB API

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Milan Petrovic GD Security Headers plugin <= 1.6.1 versions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 39.5%

CVSS Severity

CVSS v3 Score 7.1

References

Products affected by CVE-2023-40330

Dev4press » Gd Security Headers » Version: 1.0

cpe:2.3:a:dev4press:gd_security_headers:1.0
Dev4press » Gd Security Headers » Version: 1.1

cpe:2.3:a:dev4press:gd_security_headers:1.1
Dev4press » Gd Security Headers » Version: 1.1.1

cpe:2.3:a:dev4press:gd_security_headers:1.1.1
Dev4press » Gd Security Headers » Version: 1.2

cpe:2.3:a:dev4press:gd_security_headers:1.2
Dev4press » Gd Security Headers » Version: 1.3

cpe:2.3:a:dev4press:gd_security_headers:1.3
Dev4press » Gd Security Headers » Version: 1.4

cpe:2.3:a:dev4press:gd_security_headers:1.4
Dev4press » Gd Security Headers » Version: 1.5

cpe:2.3:a:dev4press:gd_security_headers:1.5
Dev4press » Gd Security Headers » Version: 1.6

cpe:2.3:a:dev4press:gd_security_headers:1.6
Dev4press » Gd Security Headers » Version: 1.6.1

cpe:2.3:a:dev4press:gd_security_headers:1.6.1