CVE-2023-0644

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The Push Notifications for WordPress by PushAssist WordPress plugin through 3.0.8 does not sanitise and escape various parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
May 15, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-06459.1An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler.CVE-2023-06467.5A vulnerability classified as critical was found in dst-admin 1.5.0. Affected by this vulnerability is an unknown functionality of the file CVE-2023-06477.5A vulnerability, which was classified as critical, has been found in dst-admin 1.5.0. Affected by this issue is some unknown functionality oCVE-2023-06487.5A vulnerability, which was classified as critical, was found in dst-admin 1.5.0. This affects an unknown part of the file /home/masterConsolCVE-2023-06497.5A vulnerability has been found in dst-admin 1.5.0 and classified as critical. This vulnerability affects unknown code of the file /home/sendCVE-2023-06505.4A vulnerability was found in YAFNET up to 3.1.11 and classified as problematic. This issue affects some unknown processing of the component CVE-2023-06519.8A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template MaCVE-2023-06527.8Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WARP Client for WindowCVE-2023-06543.7Due to a misconfiguration, the WARP Mobile Client (< 6.29) for Android was susceptible to a tapjacking attack. In the event that an attackerCVE-2023-06555.3SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes CVE-2023-06567.5A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which CVE-2023-06573.4A flaw was found in Keycloak. This issue occurs due to improperly enforcing token types when validating signatures locally. This could allow