CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-5653

The WassUp Real Time Analytics WordPress plugin through 1.9.4.5 does not escape IP address provided via some headers before outputting them back in an admin page, allowing unauthenticated users to perform Stored XSS attacks against logged in admins

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 67.8%

CVSS Severity

CVSS v3 Score 6.1

References

Products affected by CVE-2023-5653

Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.7.2

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.7.2
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.7.2.1

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.7.2.1
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.8

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.8
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.8.1

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.8.1
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.8.2

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.8.2
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.8.3

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.8.3
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.8.3.1

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.8.3.1
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.8.4

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.8.4
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.8.5

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.8.5
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.8.6

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.8.6
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.9

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.9
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.9.1

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.9.1
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.9.2

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.9.2
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.9.3

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.9.3
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.9.3.1

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.9.3.1
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.9.4

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.9.4
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.9.4.1

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.9.4.1
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.9.4.2

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.9.4.2
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.9.4.3

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.9.4.3
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.9.4.4

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.9.4.4
Wassup Real Time Analytics Project » Wassup Real Time Analytics » Version: 1.9.4.5

cpe:2.3:a:wassup_real_time_analytics_project:wassup_real_time_analytics:1.9.4.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-5653

Products

Pricing

Contact Us