CVE-2023-5062

MITTEL 5.4CVE-2023-5062 · Published 20/09/2023 · updated 17/06/2026

Kurz gesagt

CVE-2023-5062 ist eine Schwachstelle (MITTEL (CVSS 5.4)) in wordpress charts (wpartisan).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.51%, höher als bei 43.7% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
wordpress charts wpartisan	`≤ 0.7.0`	No fix yet

Description

The WordPress Charts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wp_charts' shortcode in versions up to, and including, 0.7.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

References

plugins.trac.wordpress.org/browser/wp-charts/tags/0.7.0/wordpress_charts_js.php · Product
plugins.trac.wordpress.org/browser/wp-charts/tags/0.7.0/wordpress_charts_js.php · Product
wordfence.com/threat-intel/vulnerabilities/id/2de2d2c5-1373-45b6-93a0-575713226669 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free