Vulnerability Description
The Voting Record WordPress plugin through 2.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Davidjmiller | Voting Record | <= 2.0 |
Related Weaknesses (CWE)
References
- https://magos-securitas.com/txt/CVE-2023-7083.txtExploitThird Party Advisory
- https://wpscan.com/vulnerability/ba77704a-32a1-494b-b2c0-e1c2a3f98adc/Third Party Advisory
- https://magos-securitas.com/txt/CVE-2023-7083.txtExploitThird Party Advisory
- https://wpscan.com/vulnerability/ba77704a-32a1-494b-b2c0-e1c2a3f98adc/Third Party Advisory
FAQ
What is CVE-2023-7083?
CVE-2023-7083 is a vulnerability with a CVSS score of 5.4 (MEDIUM). The Voting Record WordPress plugin through 2.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored ...
How severe is CVE-2023-7083?
CVE-2023-7083 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-7083?
Check the references section above for vendor advisories and patch information. Affected products include: Davidjmiller Voting Record.