CVE-2023-49152: WordPress Credit Tracker Plugin <= 1.1.17 is vulnerable to Cross Site Scripting (XSS)
Published Dec 14, 2023
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Labs64 Credit Tracker allows Stored XSS.This issue affects Credit Tracker: from n/a through 1.1.17.
Affected Software
1 affected component
Labs64 Credit Tracker Wordpress<=1.1.17
Event History
Dec 14, 2023
CVE Published
via MITRE·05:13 PM
Data Sourced
via MITRE·05:13 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-49152?
CVE-2023-49152 has a high severity due to its potential for stored cross-site scripting (XSS) attacks.
2
How do I fix CVE-2023-49152?
To fix CVE-2023-49152, update Labs64 Credit Tracker to version 1.1.18 or later.
3
Which versions of Credit Tracker are affected by CVE-2023-49152?
CVE-2023-49152 affects Labs64 Credit Tracker versions up to and including 1.1.17.
4
What type of vulnerability is CVE-2023-49152?
CVE-2023-49152 is a stored cross-site scripting (XSS) vulnerability.
5
Who is impacted by CVE-2023-49152?
Users of Labs64 Credit Tracker running versions 1.1.17 or earlier are impacted by CVE-2023-49152.