VDB
CVE-2023-3344
CVE-2023-3344
PUBLISHED
CVSS 9.300000190734863 CRITICAL
The Auto Location for WP Job Manager via Google WordPress plugin before 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
EPSS 0.44% · 37.9th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS Score
0.44%
37.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Auto Location for WP Job Manager via Google | 0, 0 |
| auto_location_for_wp_job_manager_via_google_project | auto_location_for_wp_job_manager_via_google | 0, 0 |
Timeline
- Jul 24, 2023 CVE Published
- Jul 24, 2023 PoC Published
- Jul 25, 2023 EPSS Score
- Aug 28, 2023 EPSS Score
- Oct 2, 2023 EPSS Score
- Nov 5, 2023 EPSS Score
- Jan 13, 2024 EPSS Score
- Feb 17, 2024 EPSS Score
- Mar 22, 2024 EPSS Score
- Apr 26, 2024 EPSS Score
- May 30, 2024 EPSS Score
- Jul 4, 2024 EPSS Score