CVE-2023-32961

moderate-risk

Published 2023-06-12

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Katie Seaborn Zotpress plugin <= 7.3.3 versions.

Do I need to act?

4.7% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.1/10 High

NETWORK / LOW complexity

Zotpress

Zotpress Project

https://lourcode.kr/posts/CVE-2023-32961-Analysis/

Third Party Advisory https://patchstack.com/database/vulnerability/zotpress/wordpress-zotpress-plugin...

https://lourcode.kr/posts/CVE-2023-32961-Analysis/

Third Party Advisory https://patchstack.com/database/vulnerability/zotpress/wordpress-zotpress-plugin...

/ 100

moderate-risk

Severity 25/34 · High

Exploitability 8/34 · Low

Exposure 5/34 · Minimal