CVE-2023-41872: WordPress WoodMart Theme <= 7.2.4 is vulnerable to Cross Site Scripting (XSS)

Q: What is CVE-2023-41872?

CVE-2023-41872 is an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in the Xtemos WoodMart plugin, versions <= 7.2.4.

Q: How severe is CVE-2023-41872?

CVE-2023-41872 has a severity rating of 6.1 (High).

Q: How does CVE-2023-41872 affect the Xtemos WoodMart plugin?

CVE-2023-41872 affects the Xtemos WoodMart plugin, versions <= 7.2.4, and can be exploited by unauthenticated attackers to execute arbitrary JavaScript code in a victim's browser.

Q: Is there a fix available for CVE-2023-41872?

Yes, a fix is available for CVE-2023-41872 in the form of an updated version of the Xtemos WoodMart plugin (version > 7.2.4) which addresses the vulnerability.

Published Sep 25, 2023

Updated

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xtemos WoodMart plugin <= 7.2.4 versions.

Affected Software

1 affected component

Xtemos Woodmart Wordpress<=7.2.4

Remediation

Information

Update to 7.2.5 or a higher version.

Event History

Sep 25, 2023

CVE Published

via MITRE·01:05 AM

Data Sourced

via MITRE·01:05 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-41872?

CVE-2023-41872 is an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in the Xtemos WoodMart plugin, versions <= 7.2.4.

How severe is CVE-2023-41872?

CVE-2023-41872 has a severity rating of 6.1 (High).

How does CVE-2023-41872 affect the Xtemos WoodMart plugin?

CVE-2023-41872 affects the Xtemos WoodMart plugin, versions <= 7.2.4, and can be exploited by unauthenticated attackers to execute arbitrary JavaScript code in a victim's browser.

Is there a fix available for CVE-2023-41872?

Yes, a fix is available for CVE-2023-41872 in the form of an updated version of the Xtemos WoodMart plugin (version > 7.2.4) which addresses the vulnerability.

What is the Common Weakness Enumeration (CWE) for CVE-2023-41872?

The Common Weakness Enumeration (CWE) for CVE-2023-41872 is CWE-79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').