CVE-2023-33323

MediumCVSS 5.9

Published: 22/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

23th percentile - higher than 23% of all known CVEs

Summary

The ARMember plugin versions up to 4.0.2 contain a stored Cross-Site Scripting (XSS) vulnerability with admin authorization. An attacker can exploit this flaw to inject malicious scripts that will execute in the context of users with admin privileges.

Risk Assessment

Organizations using this plugin may face serious threats, including data theft or takeover of admin accounts. Exploiting this vulnerability could lead to loss of user trust and damage to the company's reputation.

Recommendation

It is recommended to update the ARMember plugin to the latest version to mitigate this vulnerability. Additionally, conducting a security audit of the application is advisable to identify other potential flaws.

Original NVD description (English source)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.2 versions.