CVE-2023-45607

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Hector Cabrera WordPress Popular Posts plugin <= 6.3.2 versions.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Oct 18, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-456085.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Nicola Modugno Smart Cookie Kit plugin <= 2.3.1 versions.CVE-2023-456095.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POWR.Io Contact Form – Custom Builder,CVE-2023-45614.8Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.4.CVE-2023-456129.8In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXECVE-2023-456139.1In JetBrains Ktor before 2.3.5 server certificates were not verifiedCVE-2023-456149.8There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending CVE-2023-456159.8There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending CVE-2023-456169.8There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution bCVE-2023-456178.2There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management protocol). SuccessfulCVE-2023-456188.2There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol).CVE-2023-456198.2There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management protocol). SuccessfuCVE-2023-45629.1Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attack
CVE-2023-45607: Medium severity, CVSS 5.4 | Vulnix