CVE-2023-33929

MediumCVSS 5.9

Published: 30/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

28th percentile - higher than 28% of all known CVEs

The Joaquín Ruiz Easy Admin Menu plugin versions <= 1.3 has a stored Cross-Site Scripting (XSS) vulnerability with admin authorization.

An attacker with access to the admin panel can inject malicious code, potentially leading to data theft or session hijacking.

It is recommended to update the plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Joaquín Ruiz Easy Admin Menu plugin <= 1.3 versions.