CVE-2023-2184: XSS
First published: Fri Jun 09 2023(Updated: )
The WP Responsive Tabs horizontal vertical and accordion Tabs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.1.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| I Thirteen Web Solution WP Responsive Tabs | <1.1.16 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2825016%40responsive-horizontal-vertical-and-accordion-tabs%2Ftags%2F1.1.15&new=2900990%40responsive-horizontal-vertical-and-accordion-tabs%2Ftags%2F1.1.16
- https://www.wordfence.com/threat-intel/vulnerabilities/id/fe54c37f-1421-48aa-b502-045847d13ae3?source=cve
Frequently Asked Questions
What is the severity of CVE-2023-2184?
The severity of CVE-2023-2184 is medium with a severity value of 6.1.
How does CVE-2023-2184 affect the WP Responsive Tabs plugin?
CVE-2023-2184 affects the WP Responsive Tabs plugin in versions up to, and including, 1.1.15.
What is the vulnerability in CVE-2023-2184?
The vulnerability in CVE-2023-2184 is Reflected Cross-Site Scripting.
How can the Reflected Cross-Site Scripting vulnerability be exploited in CVE-2023-2184?
The Reflected Cross-Site Scripting vulnerability in CVE-2023-2184 can be exploited via the search_term parameter.
Is there a fix available for CVE-2023-2184?
Yes, a fix is available for CVE-2023-2184 in version 1.1.16 of the WP Responsive Tabs plugin.
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/i13websolution
- canonical/i thirteen web solution wp responsive tabs