CVE-2023-5749: EmbedPress < 3.9.2 - Reflected XSS
The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape user input before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-5749?
CVE-2023-5749 is classified as a high severity vulnerability due to its potential for Reflected Cross-Site Scripting attacks that can impact high privilege users.
How do I fix CVE-2023-5749?
To mitigate CVE-2023-5749, update the EmbedPress WordPress plugin to version 3.9.2 or later.
Who is affected by CVE-2023-5749?
CVE-2023-5749 affects users of the EmbedPress WordPress plugin prior to version 3.9.2, particularly high privilege users like administrators.
What type of attack is associated with CVE-2023-5749?
CVE-2023-5749 is associated with a Reflected Cross-Site Scripting attack, which exploits the lack of input sanitization and escaping.
What does CVE-2023-5749 exploit in the EmbedPress plugin?
CVE-2023-5749 exploits the failure to properly sanitize and escape user input before rendering it on the page.