CVE-2023-30877: WordPress XML for Google Merchant Center Plugin <= 3.0.1 is vulnerable to Cross Site Scripting (XSS)

Q: What is the severity of CVE-2023-30877?

CVE-2023-30877 is classified as a reflected cross-site scripting (XSS) vulnerability, which can allow attackers to execute malicious scripts in a user's web browser.

Q: How do I fix CVE-2023-30877?

To fix CVE-2023-30877, users should update the Maxim Glazunov XML for Google Merchant Center plugin to version 3.0.2 or later.

Q: Which versions are affected by CVE-2023-30877?

CVE-2023-30877 affects the Maxim Glazunov XML for Google Merchant Center plugin versions up to and including 3.0.1.

Q: What systems are impacted by CVE-2023-30877?

CVE-2023-30877 impacts WordPress installations using the Maxim Glazunov XML for Google Merchant Center plugin.

Q: Is authentication required to exploit CVE-2023-30877?

No, CVE-2023-30877 is an unauthenticated reflected XSS vulnerability, allowing exploitation without user authentication.

Published Aug 17, 2023

Updated

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Maxim Glazunov XML for Google Merchant Center plugin <= 3.0.1 versions.

Affected Software

1 affected component

Icopydoc Xml For Google Merchant Center Wordpress<=3.0.1

Remediation

Information

Update to 3.0.2 or a higher version.

Event History

Aug 17, 2023

CVE Published

via MITRE·08:30 AM

Data Sourced

via MITRE·08:30 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-30877?

CVE-2023-30877 is classified as a reflected cross-site scripting (XSS) vulnerability, which can allow attackers to execute malicious scripts in a user's web browser.

How do I fix CVE-2023-30877?

To fix CVE-2023-30877, users should update the Maxim Glazunov XML for Google Merchant Center plugin to version 3.0.2 or later.

Which versions are affected by CVE-2023-30877?