CVE-2023-31074: WordPress Extensions for Leaflet Map Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)
Published Aug 17, 2023
·Updated
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in hupe13 Extensions for Leaflet Map plugin <= 3.4.1 versions.
Affected Software
1 affected component
hupe13 Extensions For Leaflet Map Wordpress<=3.4.1
Remediation
Information
Update to 3.4.2 or a higher version.
Event History
Aug 17, 2023
CVE Published
via MITRE·10:01 AM
Data Sourced
via MITRE·10:01 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-31074?
CVE-2023-31074 is classified as a high severity vulnerability due to its potential for unauthenticated reflected cross-site scripting attacks.
2
How do I fix CVE-2023-31074?
To fix CVE-2023-31074, update the Hupe13 Extensions for Leaflet Map plugin to version 3.4.2 or later.
3
What is the impact of CVE-2023-31074?
The impact of CVE-2023-31074 allows attackers to execute arbitrary scripts in the context of the user's session through reflected XSS.
4
Which versions are affected by CVE-2023-31074?
CVE-2023-31074 affects Hupe13 Extensions for Leaflet Map plugin versions 3.4.1 and earlier.
5
Who can exploit CVE-2023-31074?
CVE-2023-31074 can be exploited by attackers without authentication, making it particularly dangerous.