CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-5051

The CallRail Phone Call Tracking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'callrail_form' shortcode in versions up to, and including, 0.5.2 due to insufficient input sanitization and output escaping on the 'form_id' user supplied attribute. This makes it possible for authenticated attackers with contributor level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 26.6%

CVSS Severity

CVSS v3 Score 6.4

References

Products affected by CVE-2023-5051

Callrail » Callrail Phone Call Tracking » Version: N/A

cpe:2.3:a:callrail:callrail_phone_call_tracking:-
Callrail » Callrail Phone Call Tracking » Version: 0.2

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.2
Callrail » Callrail Phone Call Tracking » Version: 0.3

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.3
Callrail » Callrail Phone Call Tracking » Version: 0.3.1

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.3.1
Callrail » Callrail Phone Call Tracking » Version: 0.3.11

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.3.11
Callrail » Callrail Phone Call Tracking » Version: 0.3.2

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.3.2
Callrail » Callrail Phone Call Tracking » Version: 0.3.3

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.3.3
Callrail » Callrail Phone Call Tracking » Version: 0.3.4

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.3.4
Callrail » Callrail Phone Call Tracking » Version: 0.3.5

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.3.5
Callrail » Callrail Phone Call Tracking » Version: 0.3.6

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.3.6
Callrail » Callrail Phone Call Tracking » Version: 0.3.7

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.3.7
Callrail » Callrail Phone Call Tracking » Version: 0.3.8

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.3.8
Callrail » Callrail Phone Call Tracking » Version: 0.4.0

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.4.0
Callrail » Callrail Phone Call Tracking » Version: 0.4.1

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.4.1
Callrail » Callrail Phone Call Tracking » Version: 0.4.10

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.4.10
Callrail » Callrail Phone Call Tracking » Version: 0.4.11

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.4.11
Callrail » Callrail Phone Call Tracking » Version: 0.4.12

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.4.12
Callrail » Callrail Phone Call Tracking » Version: 0.4.2

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.4.2
Callrail » Callrail Phone Call Tracking » Version: 0.4.3

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.4.3
Callrail » Callrail Phone Call Tracking » Version: 0.4.4

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.4.4
Callrail » Callrail Phone Call Tracking » Version: 0.4.5

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.4.5
Callrail » Callrail Phone Call Tracking » Version: 0.4.6

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.4.6
Callrail » Callrail Phone Call Tracking » Version: 0.4.7

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.4.7
Callrail » Callrail Phone Call Tracking » Version: 0.4.8

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.4.8
Callrail » Callrail Phone Call Tracking » Version: 0.4.9

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.4.9
Callrail » Callrail Phone Call Tracking » Version: 0.5.0

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.5.0
Callrail » Callrail Phone Call Tracking » Version: 0.5.1

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.5.1
Callrail » Callrail Phone Call Tracking » Version: 0.5.2

cpe:2.3:a:callrail:callrail_phone_call_tracking:0.5.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-5051

Products

Pricing

Contact Us