CVE-2023-34368
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
The Kanban Boards plugin for WordPress versions up to 2.5.20 has a stored Cross-Site Scripting (XSS) vulnerability with admin authorization. An attacker can exploit this flaw to inject malicious scripts that will execute in the context of administrative users.
Risk Assessment
This vulnerability could lead to the takeover of administrator accounts and allow attackers to perform unauthorized actions within the system. This may result in serious consequences for data security and application integrity.
Recommendation
It is recommended to update the Kanban Boards plugin to the latest version to mitigate this vulnerability. Additionally, conducting a security audit to identify potential threats is advisable.
Original NVD description (English source)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kanban for WordPress Kanban Boards for WordPress plugin <= 2.5.20 versions.