CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-5135

The Simple Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gravity-simple-turnstile' shortcode in versions up to, and including, 1.23.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 49.1%

CVSS Severity

CVSS v3 Score 6.4

References

Products affected by CVE-2023-5135

Replywp » Simple Cloudfare Turnstile » Version: 1.0.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.0.0
Replywp » Simple Cloudfare Turnstile » Version: 1.1.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.1.0
Replywp » Simple Cloudfare Turnstile » Version: 1.1.1

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.1.1
Replywp » Simple Cloudfare Turnstile » Version: 1.1.2

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.1.2
Replywp » Simple Cloudfare Turnstile » Version: 1.10.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.10.0
Replywp » Simple Cloudfare Turnstile » Version: 1.11.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.11.0
Replywp » Simple Cloudfare Turnstile » Version: 1.12.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.12.0
Replywp » Simple Cloudfare Turnstile » Version: 1.12.1

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.12.1
Replywp » Simple Cloudfare Turnstile » Version: 1.12.2

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.12.2
Replywp » Simple Cloudfare Turnstile » Version: 1.12.3

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.12.3
Replywp » Simple Cloudfare Turnstile » Version: 1.12.4

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.12.4
Replywp » Simple Cloudfare Turnstile » Version: 1.13.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.13.0
Replywp » Simple Cloudfare Turnstile » Version: 1.13.1

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.13.1
Replywp » Simple Cloudfare Turnstile » Version: 1.13.2

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.13.2
Replywp » Simple Cloudfare Turnstile » Version: 1.14.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.14.0
Replywp » Simple Cloudfare Turnstile » Version: 1.15.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.15.0
Replywp » Simple Cloudfare Turnstile » Version: 1.15.2

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.15.2
Replywp » Simple Cloudfare Turnstile » Version: 1.15.3

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.15.3
Replywp » Simple Cloudfare Turnstile » Version: 1.15.4

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.15.4
Replywp » Simple Cloudfare Turnstile » Version: 1.16.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.16.0
Replywp » Simple Cloudfare Turnstile » Version: 1.17.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.17.0
Replywp » Simple Cloudfare Turnstile » Version: 1.17.1

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.17.1
Replywp » Simple Cloudfare Turnstile » Version: 1.17.2

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.17.2
Replywp » Simple Cloudfare Turnstile » Version: 1.17.3

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.17.3
Replywp » Simple Cloudfare Turnstile » Version: 1.18.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.18.0
Replywp » Simple Cloudfare Turnstile » Version: 1.18.1

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.18.1
Replywp » Simple Cloudfare Turnstile » Version: 1.18.2

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.18.2
Replywp » Simple Cloudfare Turnstile » Version: 1.18.3

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.18.3
Replywp » Simple Cloudfare Turnstile » Version: 1.18.4

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.18.4
Replywp » Simple Cloudfare Turnstile » Version: 1.18.5

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.18.5
Replywp » Simple Cloudfare Turnstile » Version: 1.18.6

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.18.6
Replywp » Simple Cloudfare Turnstile » Version: 1.19.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.19.0
Replywp » Simple Cloudfare Turnstile » Version: 1.2.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.2.0
Replywp » Simple Cloudfare Turnstile » Version: 1.2.1

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.2.1
Replywp » Simple Cloudfare Turnstile » Version: 1.2.2

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.2.2
Replywp » Simple Cloudfare Turnstile » Version: 1.20.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.20.0
Replywp » Simple Cloudfare Turnstile » Version: 1.20.1

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.20.1
Replywp » Simple Cloudfare Turnstile » Version: 1.20.2

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.20.2
Replywp » Simple Cloudfare Turnstile » Version: 1.20.3

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.20.3
Replywp » Simple Cloudfare Turnstile » Version: 1.20.4

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.20.4
Replywp » Simple Cloudfare Turnstile » Version: 1.21.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.21.0
Replywp » Simple Cloudfare Turnstile » Version: 1.21.1

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.21.1
Replywp » Simple Cloudfare Turnstile » Version: 1.21.2

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.21.2
Replywp » Simple Cloudfare Turnstile » Version: 1.21.3

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.21.3
Replywp » Simple Cloudfare Turnstile » Version: 1.22.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.22.0
Replywp » Simple Cloudfare Turnstile » Version: 1.22.1

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.22.1
Replywp » Simple Cloudfare Turnstile » Version: 1.23.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.23.0
Replywp » Simple Cloudfare Turnstile » Version: 1.23.1

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.23.1
Replywp » Simple Cloudfare Turnstile » Version: 1.3.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.3.0
Replywp » Simple Cloudfare Turnstile » Version: 1.4.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.4.0
Replywp » Simple Cloudfare Turnstile » Version: 1.5.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.5.0
Replywp » Simple Cloudfare Turnstile » Version: 1.5.1

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.5.1
Replywp » Simple Cloudfare Turnstile » Version: 1.6.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.6.0
Replywp » Simple Cloudfare Turnstile » Version: 1.6.1

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.6.1
Replywp » Simple Cloudfare Turnstile » Version: 1.6.2

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.6.2
Replywp » Simple Cloudfare Turnstile » Version: 1.7.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.7.0
Replywp » Simple Cloudfare Turnstile » Version: 1.8.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.8.0
Replywp » Simple Cloudfare Turnstile » Version: 1.8.1

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.8.1
Replywp » Simple Cloudfare Turnstile » Version: 1.8.2

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.8.2
Replywp » Simple Cloudfare Turnstile » Version: 1.8.3

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.8.3
Replywp » Simple Cloudfare Turnstile » Version: 1.8.4

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.8.4
Replywp » Simple Cloudfare Turnstile » Version: 1.8.5

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.8.5
Replywp » Simple Cloudfare Turnstile » Version: 1.8.6

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.8.6
Replywp » Simple Cloudfare Turnstile » Version: 1.9.0

cpe:2.3:a:replywp:simple_cloudfare_turnstile:1.9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-5135

Products

Pricing

Contact Us