CVE-2023-38000
Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block
Résumé
Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Auth. Stored (contributor+) Cross-Site Scripting (XSS) vulnerability in WordPress core 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.1.3, from 6.0 through 6.0.5, from 5.9 through 5.9.7 and Gutenberg plugin <= 16.8.0 versions.
Paquets affectés
Bitnami
wordpress-multisite
[{"type":"SEMVER","events":[{"introduced":"5.9.0"},{"fixed":"5.9.8"},{"introduced":"6.0.0"},{"fixed":"6.0.6"},{"introduced":"6.1.0"},{"fixed":"6.1.4"},{"introduced":"6.2.0"},{"fixed":"6.2.3"},{"introduced":"6.3.0"},{"fixed":"6.3.2"}]}]
Bitnami
wordpress
[{"type":"SEMVER","events":[{"introduced":"5.9.0"},{"fixed":"5.9.8"},{"introduced":"6.0.0"},{"fixed":"6.0.6"},{"introduced":"6.1.0"},{"fixed":"6.1.4"},{"introduced":"6.2.0"},{"fixed":"6.2.3"},{"introduced":"6.3.0"},{"fixed":"6.3.2"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-38000 wordpress Corrigé dans: 6.1.6+dfsg1-0+deb12u1
- Ubuntu UBUNTU-CVE-2023-38000 wordpress
Références
- advisory patchstack.com
- advisory patchstack.com
- advisory patchstack.com
- web nvd.nist.gov