CVE-2023-40677: WordPress Vertical Marquee Plugin Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)
Published Sep 27, 2023
·Updated
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Vertical marquee plugin <= 7.1 versions.
Affected Software
1 affected component
gopiplus Vertical Marquee Wordpress<=7.1
Event History
Sep 27, 2023
CVE Published
via MITRE·07:25 AM
Data Sourced
via MITRE·07:25 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-40677?
CVE-2023-40677 is an Authentication (admin+) Stored Cross-Site Scripting (XSS) vulnerability in the Gopi Ramasamy Vertical marquee plugin up to version 7.1 for WordPress.
2
How severe is CVE-2023-40677?
CVE-2023-40677 has a severity score of 4.8, which is considered medium.
3
Which software versions are affected by CVE-2023-40677?
The Gopi Ramasamy Vertical marquee plugin up to version 7.1 for WordPress is affected by CVE-2023-40677.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-40677?
CVE-2023-40677 is associated with CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
5
How can I fix CVE-2023-40677?
To fix CVE-2023-40677, update the Gopi Ramasamy Vertical marquee plugin to a version higher than 7.1.