CVE-2023-28992: WordPress Coupon Affiliates Plugin <= 5.4.3 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin plugin <= 5.4.3 versions.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28992?
CVE-2023-28992 has been classified as a high severity vulnerability due to its potential for exploitation in reflected cross-site scripting attacks.
How do I fix CVE-2023-28992?
To fix CVE-2023-28992, you should update the RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin to version 5.4.4 or higher.
Who is affected by CVE-2023-28992?
CVE-2023-28992 affects users of the RelyWP Coupon Affiliates plugin versions 5.4.3 and earlier.
What type of vulnerability is CVE-2023-28992?
CVE-2023-28992 is an unauthenticated reflected cross-site scripting (XSS) vulnerability.
Can CVE-2023-28992 allow an attacker to execute malicious scripts?
Yes, CVE-2023-28992 can allow an attacker to execute malicious scripts in the context of a victim's browser, potentially leading to data theft or session hijacking.