What is CVE-2023-0602?

CVE-2023-0602 is a medium-severity vulnerability in Johnniejodelljr Twittee Text Tweet, classified under CWE-79 CROSS-SITE SCRIPTING (XSS). CVSS score: 6.1/10. Published 2023-07-31.

How severe is CVE-2023-0602?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Is CVE-2023-0602 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Johnniejodelljr Twittee Text Tweet

CVE-2023-0602

The Twittee Text Tweet WordPress plugin through 1.0.8 does not properly escape POST values which are printed back to the user inside one of the plugin's administrative page, which allows reflected XSS attacks targeting administrators to happen.

EPSS: 0.009 (56.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Johnniejodelljr Twittee_text_tweet
Unknown Twittee Text Tweet — versions 0

Public proof-of-concept exploits

20142995/nuclei-templates

References

contact@wpscan.com (Exploit, technical-description, Third Party Advisory, exploit, vdb-entry)

Frequently asked questions

What is CVE-2023-0602?: CVE-2023-0602 is a medium-severity vulnerability in Johnniejodelljr Twittee Text Tweet, classified under CWE-79 CROSS-SITE SCRIPTING (XSS). CVSS score: 6.1/10. Published 2023-07-31.
How severe is CVE-2023-0602?: Medium severity. CVSS v3 base score is 6.1 out of 10.
Is CVE-2023-0602 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.