CVE-2023-47790 — Cross-site Scripting in Pz-linkcard

CWE-79 — Cross-site ScriptingCWE-352 — Cross-Site Request Forgery3 documents3 sources
Severity
6.1MEDIUMNVD
CNA7.1
EPSS
0.1%
top 65.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Poporon Pz-linkcardPopozure Pz-linkcard
Timeline
PublishedNov 23

Description

Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in Poporon Pz-LinkCard plugin <= 2.4.8 versions.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5poporon/pz-linkcardn/a — 2.4.8

🔴Vulnerability Details

2
GHSA
GHSA-v62f-3q2m-x4r6: Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in Poporon Pz-LinkCard plugin <= 2↗2023-11-23
▶
CVEList
WordPress Pz-LinkCard Plugin <= 2.4.8 is vulnerable to Cross Site Request Forgery (CSRF)↗2023-11-22
▶
CVE-2023-47790 — Cross-site Scripting in Pz-linkcard | cvebase