CVE-2023-2337

MEDIO 6.1CVE-2023-2337 · Published 05/06/2023 · updated 17/06/2026

In breve

CVE-2023-2337 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda convertkit - email marketing, email newsletter and landing pages (convertkit).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.46%, superiore al 39.9% delle vulnerabilità.
Correzione: aggiornare a 2.2.1 o successiva.

Package	Affected versions	Patched versions
convertkit - email marketing, email newsletter and landing pages convertkit	`< 2.2.1`	`2.2.1`

Description

The ConvertKit WordPress plugin before 2.2.1 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

References

wpscan.com/vulnerability/e5a6f834-80a4-406b-acae-57ffeec2e689 · Exploit

Altre vulnerabilità di convertkit - email marketing, email newsletter and landing pages

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free