CVE-2023-34017
CVSS Score of 10 (low)
Details
Summary
CVE-2023-34017 is a vulnerability known as Unauth. Reflected Cross-Site Scripting (XSS) in the FiveStarPlugins Five Star Restaurant Reservations plugin, affecting versions up to 2.6.7. This vulnerability has a risk score of 26 and falls under the CWE-79 category, which is about improper neutralization of input during web page generation (Cross-site Scripting). It has been identified that there are 41 instances of this vulnerability. The affected products include various versions of sHmZSS, sHmZST, sHmZSQ, sHmZSR, sHmZSW, sHmZSU, sHmZSV, sHmZSC, leuuCi, sHmZSD, leuuCh, leuuCg, sHmZSG, sHmZSH, sHmZSE, and others. The base severity rating for this vulnerability is medium to high depending on the source (NVD rates it as medium with a base score of 6.1 while Patchstack rates it as high with a base score of 7.1). Exploitation requires no privileges but user interaction is required and it can be exploited over the network. The impact on integrity and confidentiality is low while the availability impact ranges from none to low depending on the source rating. No remediation details are provided in this summary.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions