Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for Twittee Text Tweet by Unknown

    CVE-2023-0602 (GCVE-0-2023-0602)

    Vulnerability from nvd – Published: 2023-07-31 09:37 – Updated: 2024-08-02 05:17
    VLAI
    Title
    Twittee Text Tweet <= 1.0.8 - Reflected XSS
    Summary
    The Twittee Text Tweet WordPress plugin through 1.0.8 does not properly escape POST values which are printed back to the user inside one of the plugin's administrative page, which allows reflected XSS attacks targeting administrators to happen.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/c357f93d-4f21-4c… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Twittee Text Tweet Affected: 0 , ≤ 1.0.8 (custom)
    		Create a notification for this product.
    Credits
    Shreya Pohekar WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T05:17:50.079Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "exploit",
              "vdb-entry",
              "technical-description",
              "x_transferred"
            ],
            "url": "https://wpscan.com/vulnerability/c357f93d-4f21-4cd9-9378-d97756c75255"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "affected",
          "product": "Twittee Text Tweet",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.0.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Shreya Pohekar"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Twittee Text Tweet WordPress plugin through 1.0.8 does not properly escape POST values which are printed back to the user inside one of the plugin\u0027s administrative page, which allows reflected XSS attacks targeting administrators to happen."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79 Cross-Site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-07-31T09:37:33.393Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/c357f93d-4f21-4cd9-9378-d97756c75255"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Twittee Text Tweet \u003c= 1.0.8 - Reflected XSS",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2023-0602",
    "datePublished": "2023-07-31T09:37:33.393Z",
    "dateReserved": "2023-01-31T19:58:31.990Z",
    "dateUpdated": "2024-08-02T05:17:50.079Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2023-0602 (GCVE-0-2023-0602)

    Vulnerability from cvelistv5 – Published: 2023-07-31 09:37 – Updated: 2024-08-02 05:17
    VLAI
    Title
    Twittee Text Tweet <= 1.0.8 - Reflected XSS
    Summary
    The Twittee Text Tweet WordPress plugin through 1.0.8 does not properly escape POST values which are printed back to the user inside one of the plugin's administrative page, which allows reflected XSS attacks targeting administrators to happen.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/c357f93d-4f21-4c… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Twittee Text Tweet Affected: 0 , ≤ 1.0.8 (custom)
    		Create a notification for this product.
    Credits
    Shreya Pohekar WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T05:17:50.079Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "exploit",
              "vdb-entry",
              "technical-description",
              "x_transferred"
            ],
            "url": "https://wpscan.com/vulnerability/c357f93d-4f21-4cd9-9378-d97756c75255"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "affected",
          "product": "Twittee Text Tweet",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.0.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Shreya Pohekar"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Twittee Text Tweet WordPress plugin through 1.0.8 does not properly escape POST values which are printed back to the user inside one of the plugin\u0027s administrative page, which allows reflected XSS attacks targeting administrators to happen."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79 Cross-Site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-07-31T09:37:33.393Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/c357f93d-4f21-4cd9-9378-d97756c75255"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Twittee Text Tweet \u003c= 1.0.8 - Reflected XSS",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2023-0602",
    "datePublished": "2023-07-31T09:37:33.393Z",
    "dateReserved": "2023-01-31T19:58:31.990Z",
    "dateUpdated": "2024-08-02T05:17:50.079Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}