CVE-2023-4925

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-4925
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-4925.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-4925
Published
2024-01-15T15:10:43.806Z
Modified
2026-07-15T01:49:15.954164647Z
Severity
  • 4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
Easy Forms for Mailchimp <= 6.8.10 - Admin+ Stored Cross-Site Scripting
Details

The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4925.json",
    "cna_assigner": "WPScan",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "6.8.10"
                }
            ],
            "source": "AFFECTED_FIELD"
        },
        {
            "source": "DESCRIPTION",
            "extracted_events": [
                {
                    "fixed": "6.8.10"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/EvanHerman/yikes-inc-easy-mailchimp-extender

Affected ranges

Type
GIT
Repo
https://github.com/EvanHerman/yikes-inc-easy-mailchimp-extender
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
eb1203fa6c1b25294ec28fec51f0ad8c2e4df402
Database specific 
{
    "source": "DESCRIPTION",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "6.8.10"
        }
    ]
}

Affected versions

1.*
1.0.0
1.0.1
1.1.0
1.2.0
1.3.0
1.3.1
2.*
2.0.0
2.0.1
2.0.2
2.0.3
2.1.0
2.1.1
2.2.0
3.*
3.0
3.0.1
4.*
4.0
4.1
4.2
4.2.1
6.*
6.0.0-rc1.0
6.6.0
6.6.1
6.6.2
6.6.4
6.7.0
6.8.0
6.8.1
6.8.2
6.8.3
6.8.4
6.8.5
6.8.6
6.8.8
6.8.9
v.*
v.6.2.2
v.6.2.3
v4.*
v4.0
v6.*
v6.0.1
v6.2.0
v6.2.1
v6.7.0
v6.8.7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-4925.json"