CVE-2023-34170

MediumCVSS 5.9

Published: 22/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

28th percentile - higher than 28% of all known CVEs

Summary

The WP Overnight Quick/Bulk Order Form for WooCommerce plugin versions <= 3.5.7 has a stored Cross-Site Scripting (XSS) vulnerability with admin+ privileges.

Risk Assessment

An attacker with admin access can inject malicious code, potentially leading to data theft or account takeover.

Recommendation

It is recommended to update the plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin <= 3.5.7 versions.