ByteOS Network

NVD Vulnerability Details :

CVE-2023-0602

Modified

Source-contact@wpscan.com

Published At-31 Jul, 2023 | 10:15

Updated At-07 Nov, 2023 | 04:00

The Twittee Text Tweet WordPress plugin through 1.0.8 does not properly escape POST values which are printed back to the user inside one of the plugin's administrative page, which allows reflected XSS attacks targeting administrators to happen.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Type: Primary

Version: 3.1

Base score: 6.1

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CPE Matches

johnniejodelljr>>twittee_text_tweet>>Versions up to 1.0.8(inclusive)

cpe:2.3:a:johnniejodelljr:twittee_text_tweet:*:*:*:*:*:wordpress:*:*

References

Hyperlink	Source	Resource
https://wpscan.com/vulnerability/c357f93d-4f21-4cd9-9378-d97756c75255	contact@wpscan.com	Exploit Third Party Advisory

Hyperlink: https://wpscan.com/vulnerability/c357f93d-4f21-4cd9-9378-d97756c75255

Source: contact@wpscan.com

Resource:

Exploit

Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History