CVE-2023-4820

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users with privileges as low as contributor to inject arbitrary web scripts that could target a site admin or superadmin.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://wpscan.com/vulnerability/e866a214-a142-43c7-b93d-ff2301a3e432	Exploit Third Party Advisory
https://wpscan.com/vulnerability/e866a214-a142-43c7-b93d-ff2301a3e432	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:blubrry:powerpress:*:*:*:*:*:wordpress:*:*

History

21 Nov 2024, 08:36

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-10-16 20:15

Updated : 2025-03-05 17:15

NVD link : CVE-2023-4820

Mitre link : CVE-2023-4820

CVE.ORG link : CVE-2023-4820

JSON object : View

Products Affected

blubrry

powerpress

CWE

No CWE.

{"id": "CVE-2023-4820", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2023-10-16T20:15:16.913", "references": [{"url": "https://wpscan.com/vulnerability/e866a214-a142-43c7-b93d-ff2301a3e432", "tags": ["Exploit", "Third Party Advisory"], "source": "contact@wpscan.com"}, {"url": "https://wpscan.com/vulnerability/e866a214-a142-43c7-b93d-ff2301a3e432", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "descriptions": [{"lang": "en", "value": "The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users with privileges as low as contributor to inject arbitrary web scripts that could target a site admin or superadmin."}, {"lang": "es", "value": "El complemento PowerPress Podcasting por el complemento Blubrry WordPress anterior a 11.0.12 no sanitiza ni escapa del campo de URL de medios en las publicaciones, lo que podr\u00eda permitir a los usuarios con privilegios tan bajos como colaborador inyectar scripts web arbitrarios que podr\u00edan apuntar a un administrador o s\u00faper administrador del sitio."}], "lastModified": "2025-03-05T17:15:12.883", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:blubrry:powerpress:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "7463AB7A-4418-4360-97EF-2DF859362287", "versionEndExcluding": "11.0.12"}], "operator": "OR"}]}], "sourceIdentifier": "contact@wpscan.com"}

5.4 /10