CVE-2023-33213: WordPress wpView Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gVectors Display Custom Fields – wpView plugin <= 1.3.0 versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress wpView plugin (gVectors Display Custom Fields – wpView)to a version that resolves this vulnerability.Fixed in 1.3.0
Event History
Frequently Asked Questions
What is CVE-2023-33213?
CVE-2023-33213 is an authentication bypass vulnerability in the gVectors Display Custom Fields - wpView plugin versions up to 1.3.0.
How severe is CVE-2023-33213?
CVE-2023-33213 has a severity rating of 4.8 (Medium).
What software versions are affected by CVE-2023-33213?
CVE-2023-33213 affects gVectors Display Custom Fields - wpView plugin versions up to 1.3.0.
What is the Common Weakness Enumeration (CWE) for CVE-2023-33213?
The Common Weakness Enumeration (CWE) for CVE-2023-33213 is CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
How can I fix CVE-2023-33213?
To fix CVE-2023-33213, update gVectors Display Custom Fields - wpView plugin to version 1.3.1 or later.