CVE-2023-0422 — MEDIUM (4.8)

Q: How severe is CVE-2023-0422?

CVE-2023-0422 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2023-0422?

Check the references section above for vendor advisories and patch information. Affected products include: Article Directory Project Article Directory.

Vulnerability Description

The Article Directory WordPress plugin through 1.3 does not properly sanitize the `publish_terms_text` setting before displaying it in the administration panel, which may enable administrators to conduct Stored XSS attacks in multisite contexts.

CVSS Score

4.8

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Article Directory Project	Article Directory	<= 1.3

References

https://wpscan.com/vulnerability/d57f2fb2-5251-4069-8c9a-a4af269c5e62ExploitThird Party Advisory
https://wpscan.com/vulnerability/d57f2fb2-5251-4069-8c9a-a4af269c5e62ExploitThird Party Advisory

FAQ

What is CVE-2023-0422?

CVE-2023-0422 is a vulnerability with a CVSS score of 4.8 (MEDIUM). The Article Directory WordPress plugin through 1.3 does not properly sanitize the `publish_terms_text` setting before displaying it in the administration panel, which may enable administrators to cond...

How severe is CVE-2023-0422?

CVE-2023-0422 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-0422?

Check the references section above for vendor advisories and patch information. Affected products include: Article Directory Project Article Directory.