CVE-2023-28415: WordPress Side Cart Woocommerce (Ajax) Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)
Published Aug 30, 2023
·Updated
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XootiX Side Cart Woocommerce (Ajax) plugin <= 2.2 versions.
Affected Software
1 affected component
XootiX Side Cart Woocommerce Wordpress<=2.2
Remediation
Information
Update to 2.3 or a higher version.
Event History
Aug 30, 2023
CVE Published
via MITRE·03:31 PM
Data Sourced
via MITRE·03:31 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-28415?
CVE-2023-28415 has a high severity level due to its potential for stored Cross-Site Scripting (XSS) attacks.
2
How do I fix CVE-2023-28415?
To fix CVE-2023-28415, update the XootiX Side Cart Woocommerce plugin to a version newer than 2.2.
3
What type of vulnerability is CVE-2023-28415?
CVE-2023-28415 is an authenticated Stored Cross-Site Scripting (XSS) vulnerability.
4
Which versions of the XootiX Side Cart Woocommerce plugin are affected by CVE-2023-28415?
CVE-2023-28415 affects versions of the XootiX Side Cart Woocommerce plugin up to and including 2.2.
5
Can CVE-2023-28415 be exploited remotely?
Yes, CVE-2023-28415 can be exploited remotely if an attacker gains access to an authenticated admin account.