CVE-2023-32961: WordPress Zotpress Plugin <= 7.3.3 is vulnerable to Cross Site Scripting (XSS)
Published Jun 12, 2023
·Updated
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Katie Seaborn Zotpress plugin <= 7.3.3 versions.
Affected Software
1 affected component
Zotpress Project Zotpress Wordpress<=7.3.3
Remediation
Information
Update to 7.3.4 or a higher version.
Event History
Jun 12, 2023
CVE Published
via MITRE·02:19 PM
Data Sourced
via MITRE·02:19 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-32961?
CVE-2023-32961 has been classified as a medium severity reflected cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2023-32961?
To mitigate CVE-2023-32961, update the Zotpress plugin to version 7.3.4 or later.
3
What versions of the Zotpress plugin are affected by CVE-2023-32961?
CVE-2023-32961 affects all versions of the Zotpress plugin up to and including version 7.3.3.
4
What type of vulnerability is CVE-2023-32961?
CVE-2023-32961 is classified as an unauthenticated reflected cross-site scripting (XSS) vulnerability.
5
Can CVE-2023-32961 lead to data theft?
Yes, CVE-2023-32961 can allow attackers to execute malicious scripts in the user's browser, potentially leading to data theft.