CVE-2023-36503: WordPress MaxButtons Plugin <= 9.5.3 is vulnerable to Cross Site Scripting (XSS)
Published Jul 25, 2023
·Updated
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Max Foundry WordPress Button Plugin MaxButtons plugin <= 9.5.3 versions.
Affected Software
1 affected component
Maxfoundry Maxbuttons Wordpress<=9.5.3
Remediation
Information
Update to 9.6 or a higher version.
Event History
Jul 25, 2023
CVE Published
via MITRE·01:50 PM
Data Sourced
via MITRE·01:50 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-36503?
CVE-2023-36503 is categorized as a medium severity Cross-Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2023-36503?
To fix CVE-2023-36503, update the MaxFoundry WordPress Button Plugin MaxButtons to version 9.5.4 or later.
3
Who is affected by CVE-2023-36503?
CVE-2023-36503 affects users with the MaxFoundry WordPress Button Plugin MaxButtons version 9.5.3 or earlier.
4
What type of vulnerability is CVE-2023-36503?
CVE-2023-36503 is an authenticated Cross-Site Scripting (XSS) vulnerability.
5
Can CVE-2023-36503 be exploited by unauthenticated users?
No, CVE-2023-36503 requires an authenticated user with Contributor or higher permissions to exploit.