eLightUp Vulnerabilities and Affected Products
Vulnerabilities associated with eRocket.
Products
Clear product- eRocket1 vulnerability
- Meta Box – WordPress Custom Fields Framework1 vulnerability
- Slim SEO1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-28174MEDIUM | WordPress eRocket Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in eLightUp eRocket plugin <= 1.2.4 versions. CWE-79Jun 22, 2023 | CVSS5.9v3.1 | EPSS0.392% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |