CVE-2023-34170: WordPress Quick/Bulk Order Form for WooCommerce Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin <= 3.5.7 versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WP Overnight Quick/Bulk Order Form for WooCommerceto a version that resolves this vulnerability.Fixed in 3.6.0
Event History
Frequently Asked Questions
What is the severity of CVE-2023-34170?
CVE-2023-34170 is categorized as a high severity vulnerability due to its potential for exploitation through stored cross-site scripting.
How do I fix CVE-2023-34170?
To fix CVE-2023-34170, update the WP Overnight Quick/Bulk Order Form for WooCommerce plugin to version 3.5.8 or later.
What type of vulnerability is CVE-2023-34170?
CVE-2023-34170 is a stored cross-site scripting (XSS) vulnerability affecting WordPress plugins.
Who is affected by CVE-2023-34170?
Administrators using WP Overnight Quick/Bulk Order Form for WooCommerce plugin versions 3.5.7 and lower are affected by CVE-2023-34170.
Can CVE-2023-34170 be exploited remotely?
Yes, CVE-2023-34170 can be exploited remotely by an authenticated attacker with administrative privileges.