CVE-2023-47684
published 2023-11-14CVE-2023-47684: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ThemePunch OHG Essential Grid plugin <= 3.1.0 versions.
PriorityP334medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EXPLOIT
EPSS
0.84%
53.2th percentile
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ThemePunch OHG Essential Grid plugin <= 3.1.0 versions.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| themepunch | essential_grid | <= 3.1.0 | — |
| themepunch_ohg | essential_grid | n/a – 3.1.0 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
Essential Grid <= 3.1.0 - Cross-Site Scripting
nuclei·CVSS 6.1
CVE-2023-47684 [MEDIUM] Essential Grid <= 3.1.0 - Cross-Site Scripting
Essential Grid alert(document.domain);"
- "lightbox"
condition: and
- type: word
part: content_type
words:
- text/html
- type: status
status:
- 200
# digest: 4b0a00483046022100d314defd08add3908bd318ca2779edf2f44aa3189e1296e361a41e5686617e32022100e227b0bf3a7b4d684daacdfed95dddffd3e7ec014f3430bef37407f31dbccedf:922c64590222798bb761d5b6d8e72950
https://patchstack.com/database/vulnerability/essential-grid/wordpress-essential-grid-plugin-3-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cvehttps://patchstack.com/database/vulnerability/essential-grid/wordpress-essential-grid-plugin-3-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
2023-11-14
Published