CVE-2023-24378: WordPress Glossary Plugin <= 2.1.27 is vulnerable to Cross Site Scripting (XSS)
Published Apr 6, 2023
·Updated
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Codeat Glossary plugin <= 2.1.27 versions.
Affected Software
1 affected component
Codeat Glossary Wordpress<2.1.28
Remediation
Information
Update to 2.1.28 or a higher version.
Event History
Apr 6, 2023
CVE Published
via MITRE·01:48 PM
Data Sourced
via MITRE·01:48 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-24378?
CVE-2023-24378 is classified as a medium severity vulnerability due to its potential impact on user data integrity.
2
How do I fix CVE-2023-24378?
To fix CVE-2023-24378, upgrade the Codeat Glossary plugin to version 2.1.28 or later.
3
What type of vulnerability is CVE-2023-24378?
CVE-2023-24378 is a Stored Cross-Site Scripting (XSS) vulnerability affecting specific versions of the Codeat Glossary plugin.
4
Who is affected by CVE-2023-24378?
Users of the Codeat Glossary plugin versions 2.1.27 and below are affected by CVE-2023-24378 if they have contributor-level access.
5
Can CVE-2023-24378 lead to security breaches?
Yes, CVE-2023-24378 can potentially allow attackers to execute unauthorized scripts in the context of an authenticated user's session.