CVE-2023-38478: WordPress Integration for WooCommerce and QuickBooks Plugin <= 1.2.3 is vulnerable to Open Redirection
Published Dec 19, 2023
·Updated
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and QuickBooks.This issue affects Integration for WooCommerce and QuickBooks: from n/a through 1.2.3.
Affected Software
1 affected component
crmperks Integration For Woocommerce And Quickbooks Wordpress<=1.2.3
Remediation
Information
Update to 1.2.4 or a higher version.
Event History
Dec 19, 2023
CVE Published
via MITRE·08:03 PM
Data Sourced
via MITRE·08:03 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-38478?
The severity of CVE-2023-38478 is classified as critical due to its potential for open redirection to untrusted sites.
2
How do I fix CVE-2023-38478?
To fix CVE-2023-38478, update the Integration for WooCommerce and QuickBooks plugin to a version later than 1.2.3.
3
What products are affected by CVE-2023-38478?
CVE-2023-38478 affects the Integration for WooCommerce and QuickBooks plugin for WordPress versions up to 1.2.3.
4
Can CVE-2023-38478 be exploited?
Yes, CVE-2023-38478 can be exploited to redirect users to untrusted external sites.
5
Are there any workarounds for CVE-2023-38478?
As of now, the best workaround for CVE-2023-38478 is to disable the plugin until it is updated.