CVE-2023-2184: WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.15 - Reflected Cross-Site Scripting
The WP Responsive Tabs horizontal vertical and accordion Tabs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchterm parameter in versions up to, and including, 1.1.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-2184?
The severity of CVE-2023-2184 is medium with a severity value of 6.1.
How does CVE-2023-2184 affect the WP Responsive Tabs plugin?
CVE-2023-2184 affects the WP Responsive Tabs plugin in versions up to, and including, 1.1.15.
What is the vulnerability in CVE-2023-2184?
The vulnerability in CVE-2023-2184 is Reflected Cross-Site Scripting.
How can the Reflected Cross-Site Scripting vulnerability be exploited in CVE-2023-2184?
The Reflected Cross-Site Scripting vulnerability in CVE-2023-2184 can be exploited via the search_term parameter.
Is there a fix available for CVE-2023-2184?
Yes, a fix is available for CVE-2023-2184 in version 1.1.16 of the WP Responsive Tabs plugin.