CVE-2023-3671

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape various parameters before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
Aug 7, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-367107.8Windows Media Foundation Core Remote Code Execution VulnerabilityCVE-2023-367117.8Windows Runtime C++ Template Library Elevation of Privilege VulnerabilityCVE-2023-367127.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-367135.5Windows Common Log File System Driver Information Disclosure VulnerabilityCVE-2023-367176.5Windows Virtual Trusted Platform Module Denial of Service VulnerabilityCVE-2023-367187.8Microsoft Virtual Trusted Platform Module Remote Code Execution VulnerabilityCVE-2023-367197.8Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege VulnerabilityCVE-2023-36726.1Cross-site Scripting (XSS) - DOM in GitHub repository plaidweb/webmention.js prior to 0.5.5.CVE-2023-367207.5Windows Mixed Reality Developer Tools Denial of Service VulnerabilityCVE-2023-367217.0Windows Error Reporting Service Elevation of Privilege VulnerabilityCVE-2023-367224.4Active Directory Domain Services Information Disclosure VulnerabilityCVE-2023-367237.8Windows Container Manager Service Elevation of Privilege Vulnerability
CVE-2023-3671: Medium severity, CVSS 6.1 | Vulnix