CVE-2023-22685: WordPress Category Specific RSS feed Subscription Plugin <= v2.2 is vulnerable to Cross Site Scripting (XSS)
First published: Fri May 12 2023(Updated: )
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.2 versions.
Credit: audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tipsandtricks-hq Category Specific Rss Feed Subscription | <=2.2 |
Remedy
Update to v2.3 or a higher version.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-22685.
What is the title of this vulnerability?
The title of this vulnerability is Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tips and Tricks HQ Ruhul Amin Category Specific RSS feed Subscription plugin.
What is the severity of CVE-2023-22685?
The severity of CVE-2023-22685 is medium, with a CVSS score of 4.8.
What software versions are affected by CVE-2023-22685?
The affected software is Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin version up to and including v2.2.
How can I fix the CVE-2023-22685 vulnerability?
To fix the CVE-2023-22685 vulnerability, you should update the Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin to a version above v2.2.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/severity
- agent/remedy
- agent/title
- agent/author
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- vendor/tipsandtricks-hq
- canonical/tipsandtricks-hq category specific rss feed subscription
- version/tipsandtricks-hq category specific rss feed subscription/2.2