nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-23650 CVE-2023-23650
MEDIUM
WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)
Record summary
CVE-2023-23650 has a selected CVSS score of 6.5 (medium).
Description
Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Code Snippets Extension plugin <= 4.0.2 versions.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 10, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
MainWP Code Snippets ExtensionBrowse MainWP / MainWP Code Snippets ExtensionDefault status: unaffected | CVE List | Through 4.0.2 | affected |
References
2patchstack.comvdb entry
https://patchstack.com/database/vulnerability/mainwp-code-snippets-extension/wordpress-mainwp-code-snippets-extension-plugin-4-0-2-subscriber-stored-cross-site-scripting-vulnerability?_s_id=cve