CVE-2023-37393: WordPress Atarim Plugin <= 3.9.3 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin <= 3.9.3 versions.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-37393?
CVE-2023-37393 is an authentication bypass vulnerability in the Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin.
How severe is CVE-2023-37393?
CVE-2023-37393 is considered a high severity vulnerability with a CVSS score of 4.8.
What is the affected software for CVE-2023-37393?
The affected software for CVE-2023-37393 is the Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin versions up to 3.9.3.
What is the Common Weakness Enumeration (CWE) for CVE-2023-37393?
The Common Weakness Enumeration (CWE) for CVE-2023-37393 is CWE-79, which is a category for Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
Is there a fix available for CVE-2023-37393?
Yes, a fix is available for CVE-2023-37393. It is recommended to update the Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin to version 3.9.4 or newer.