CVE-2023-35779

MediumCVSS 5.9

Published: 19/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

23th percentile - higher than 23% of all known CVEs

Summary

The Seed Fonts plugin versions up to 2.3.1 contains a stored Cross-Site Scripting (XSS) vulnerability with admin authorization. An attacker can exploit this flaw to inject malicious scripts that will execute in the context of users with admin privileges.

Risk Assessment

This vulnerability could lead to serious consequences, including data theft or takeover of admin accounts. Organizations should be aware of the risks associated with using this plugin in their systems.

Recommendation

It is recommended to update the Seed Fonts plugin to the latest version to mitigate this vulnerability. Additionally, conducting a security audit to identify potential threats is advisable.

Original NVD description (English source)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Seed Webs Seed Fonts plugin <= 2.3.1 versions.