CVE-2023-22702: WordPress WPMobile.App — Android and iOS Mobile Application Plugin <= 11.13 is vulnerable to Cross Site Scripting (XSS)
Published Mar 23, 2023
·Updated
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Application plugin <= 11.13 versions.
Affected Software
2 affected components
Wpmobile.app Project Wpmobile.app Wordpress<11.14
Amauri Wpmobile.app Wordpress<11.14
Remediation
Information
Update to 11.14 or a higher version.
Event History
Mar 23, 2023
CVE Published
via MITRE·02:42 PM
Data Sourced
via MITRE·02:42 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-22702?
CVE-2023-22702 is classified as a medium severity vulnerability due to its potential for exploitation through Cross-Site Scripting (XSS).
2
How do I fix CVE-2023-22702?
To fix CVE-2023-22702, update the WPMobile.App plugin to version 11.14 or higher as soon as possible.
3
Who is affected by CVE-2023-22702?
CVE-2023-22702 affects all users of the WPMobile.App plugin for Android and iOS mobile applications who are on version 11.13 or lower.
4
What type of vulnerability is CVE-2023-22702?
CVE-2023-22702 is an authenticated Cross-Site Scripting (XSS) vulnerability that can be exploited by users with contributor or higher access.
5
When was CVE-2023-22702 disclosed?
CVE-2023-22702 was disclosed in February 2023.