CVE-2023-5001: Horizontal scrolling announcement <= 9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Horizontal scrolling announcement for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'horizontal-scrolling' shortcode in versions up to, and including, 9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Other sources
The Horizontal scrolling announcement plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'horizontal-scrolling' shortcode in versions up to, and including, 9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for the Horizontal scrolling announcement for WordPress plugin?
The vulnerability ID for the Horizontal scrolling announcement for WordPress plugin is CVE-2023-5001.
What is the severity of CVE-2023-5001?
CVE-2023-5001 has a severity rating of medium with a CVSS score of 5.4.
What is the affected software for CVE-2023-5001?
The affected software for CVE-2023-5001 is the Horizontal scrolling announcement for WordPress plugin versions up to, and including, 9.2.
How does the vulnerability occur in the Horizontal scrolling announcement for WordPress plugin?
The vulnerability in the Horizontal scrolling announcement for WordPress plugin occurs due to insufficient input sanitization and output escaping on user supplied attributes, allowing for Stored Cross-Site Scripting attacks.
Are there any references for more information on CVE-2023-5001?
Yes, you can find more information on CVE-2023-5001 at the following references: [Reference 1](https://plugins.trac.wordpress.org/browser/horizontal-scrolling-announcement/trunk/horizontal-scrolling-announcement.php#L389) and [Reference 2](https://www.wordfence.com/threat-intel/vulnerabilities/id/d4f60e8c-2745-4930-9101-914bd73c6e1c?source=cve).