CVE-2023-30777

CVSS V2 None CVSS V3 None
Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Engine Advanced Custom Fields Pro, WP Engine Advanced Custom Fields plugins <= 6.1.5 versions.
Overview
  • CVE ID
  • CVE-2023-30777
  • Assigner
  • audit@patchstack.com
  • Vulnerability Status
  • Received
  • Published Version
  • 2023-05-10T06:15:18
  • Last Modified Date
  • 2023-05-10T06:15:18
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
References
Reference URL Reference Tags
https://patchstack.com/articles/reflected-xss-in-advanced-custom-fields-plugins-affecting-2-million-sites?_s_id=cve
https://patchstack.com/database/vulnerability/advanced-custom-fields-pro/wordpress-advanced-custom-fields-pro-plugin-6-1-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
https://patchstack.com/database/vulnerability/advanced-custom-fields/wordpress-advanced-custom-fields-plugin-6-1-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-30777
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30777
History
Created Old Value New Value Data Type Notes
2023-05-10 07:01:34 Added to TrackCVE
2023-05-10 07:01:37 Weakness Enumeration new