CVE-2023-37993

MediumCVSS 5.9

Published: 27/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

23th percentile - higher than 23% of all known CVEs

The wpShopGermany IT-RECHT KANZLEI plugin versions <= 1.7 has an authenticated stored Cross-Site Scripting (XSS) vulnerability.

An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.

It is recommended to update the plugin to the latest version to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

Auth. Stored Cross-Site Scripting (XSS) vulnerability in maennchen1.De wpShopGermany IT-RECHT KANZLEI plugin <= 1.7 versions.