CVE-2023-28776: WordPress Continuous Image Carousel With Lightbox Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)
Published Jun 22, 2023
·Updated
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin <= 1.0.15 versions.
Affected Software
1 affected component
I13websolution Continuous Image Carousel With Lightbox Wordpress<=1.0.15
Remediation
Information
Update to 1.0.16 or a higher version.
Event History
Jun 22, 2023
CVE Published
via MITRE·11:29 AM
Data Sourced
via MITRE·11:29 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-28776.
2
What is the severity of this vulnerability?
The severity of CVE-2023-28776 is high with a severity value of 6.1.
3
What is the affected software for this vulnerability?
The affected software for CVE-2023-28776 is the I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin version 1.0.15 and below.
4
What is the Common Weakness Enumeration (CWE) ID associated with this vulnerability?
The CWE ID associated with CVE-2023-28776 is CWE-79.
5
How can I fix this vulnerability?
To fix CVE-2023-28776, update the I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin to a version higher than 1.0.15.