Stored cross-site scripting in WordPress - CVE-2023-38000
Published: October 16, 2023
Vulnerability identifier: #VU82019
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N]
CVE-ID: CVE-2023-38000
CWE-ID: CWE-79
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.
The vulnerability exists due to insufficient sanitization of user-supplied data in the post link navigation block. A remote user can inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.
Affected software
WordPress
Debian Linux
Fedora
wordpress
wordpress (Debian package)
Debian Linux
Fedora
wordpress
wordpress (Debian package)
How to mitigate CVE-2023-38000
Install updates from vendor's website.
WordPress - addressed in versions 5.9.8, 6.0.6, 6.1.4, 6.2.3, 6.3.2
wordpress - addressed in versions 5.1.17-1.el7, 6.2.3-1.fc37, 6.3.2-1.el9, 6.3.2-1.fc38, 6.3.2-1.fc39
wordpress (Debian package) - addressed in versions 5.7.11+dfsg1-0+deb11u1, 6.1.6+dfsg1-0+deb12u1
wordpress - addressed in versions 5.1.17-1.el7, 6.2.3-1.fc37, 6.3.2-1.el9, 6.3.2-1.fc38, 6.3.2-1.fc39
wordpress (Debian package) - addressed in versions 5.7.11+dfsg1-0+deb11u1, 6.1.6+dfsg1-0+deb12u1
External References
- https://patchstack.com/database/vulnerability/wordpress/wordpress-core-6-3-2-contributor-stored-xss-in-navigation-links-block-vulnerability?_s_id=cve
- https://patchstack.com/articles/wordpress-core-6-3-2-security-update-technical-advisory?_s_id=cve
- https://patchstack.com/database/vulnerability/gutenberg/wordpress-gutenberg-plugin-16-8-0-contributor-stored-xss-in-navigation-links-block-vulnerability?_s_id=cve
- https://wordpress.org/news/2023/10/wordpress-6-3-2-maintenance-and-security-release/