← CVE Intelligence

CVE-2023-0644

PushAssist <= 3.0.8 - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The Push Notifications for WordPress by PushAssist WordPress plugin through 3.0.8 does not sanitise and escape various parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Affected (CNA)

Vendor / productVersions
Unknown / Push Notifications for WordPress by PushAssistaffected 0 through 3.0.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.