CVE-2023-22685: WordPress Category Specific RSS feed Subscription Plugin <= v2.2 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.2 versions.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-22685.
What is the title of this vulnerability?
The title of this vulnerability is Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tips and Tricks HQ Ruhul Amin Category Specific RSS feed Subscription plugin.
What is the severity of CVE-2023-22685?
The severity of CVE-2023-22685 is medium, with a CVSS score of 4.8.
What software versions are affected by CVE-2023-22685?
The affected software is Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin version up to and including v2.2.
How can I fix the CVE-2023-22685 vulnerability?
To fix the CVE-2023-22685 vulnerability, you should update the Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin to a version above v2.2.