CVE-2023-28932: WordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS)
Published May 10, 2023
·Updated
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Application plugin <= 11.20 versions.
Affected Software
2 affected components
Wpmobile.app Project Wpmobile.app Wordpress<=11.20
Amauri Wpmobile.app Wordpress<=11.20
Remediation
Information
Update to 11.21 or a higher version.
Event History
May 10, 2023
CVE Published
via MITRE·07:07 AM
Data Sourced
via MITRE·07:07 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-28932?
CVE-2023-28932 is classified as a high severity vulnerability due to its potential impact on user data security.
2
How do I fix CVE-2023-28932?
To fix CVE-2023-28932, update your WPMobile.App plugin to version 11.21 or later.
3
What type of vulnerability is CVE-2023-28932?
CVE-2023-28932 is a stored Cross-Site Scripting (XSS) vulnerability affecting the WPMobile.App plugin.
4
Who is affected by CVE-2023-28932?
CVE-2023-28932 affects users of the WPMobile.App plugin version 11.20 or earlier for Android and iOS mobile applications.
5
What are the potential consequences of CVE-2023-28932?
If exploited, CVE-2023-28932 can allow attackers to execute arbitrary JavaScript in the context of the user's session, compromising user data.