CVE-2023-2362 Details
Description
The Float menu WordPress plugin before 5.0.2, Bubble Menu WordPress plugin before 3.0.4, Button Generator WordPress plugin before 2.3.5, Calculator Builder WordPress plugin before 1.5.1, Counter Box WordPress plugin before 1.2.2, Floating Button WordPress plugin before 5.3.1, Herd Effects WordPress plugin before 5.2.2, Popup Box WordPress plugin before 2.2.2, Side Menu Lite WordPress plugin before 4.0.2, Sticky Buttons WordPress plugin before 3.1.1, Wow Skype Buttons WordPress plugin before 4.0.2, WP Coder WordPress plugin before 2.5.6 do not escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 23, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://wpscan.com/vulnerability/27e70507-fd68-4915-88cf-0b96ed55208e | CVE | ExploitThird Party Advisory |
| https://wpscan.com/vulnerability/27e70507-fd68-4915-88cf-0b96ed55208e | [email protected] | ExploitThird Party Advisory |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| wow-company bubble menu | < 3.0.4 |
CPE
Remediation
| |
| wow-company button generator | < 2.3.5 |
CPE
Remediation
| |
| wow-company calculator-builder | < 1.5.1 |
CPE
Remediation
| |
| wow-company counter box | < 1.2.2 |
CPE
Remediation
| |
| wow-company float menu | < 5.0.2 |
CPE
Remediation
| |
| wow-company floating button | < 5.3.1 |
CPE
Remediation
| |
| wow-company herd effects | < 5.2.2 |
CPE
Remediation
| |
| wow-company popup box | < 2.2.2 |
CPE
Remediation
| |
| wow-company side menu lite | < 4.0.2 |
CPE
Remediation
| |
| wow-company sticky buttons | < 3.1.1 |
CPE
Remediation
| |
| wow-company wow skype buttons | < 4.0.2 |
CPE
Remediation
| |
| wow-company wp coder | < 2.5.6 |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| May 5, 2025 | CVE Modified | CISA-ADP |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Nov 7, 2023 | CVE Modified | [email protected] |
| Jun 16, 2023 | Initial Analysis | [email protected] |