{"vulnerability": "CVE-2023-2579", "sightings": [{"uuid": "125d797d-ad17-46b6-98ec-e03b1e5f83a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2579", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4610", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPoC for CVE-2023-2579\nURL\uff1ahttps://github.com/daniloalbuqrque/poc-cve-xss-inventory-press-plugin\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-06-25T05:29:15.000000Z"}, {"uuid": "b860060e-6e47-45f0-b65d-25a133d0c694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25790", "type": "seen", "source": "https://t.me/arpsyndicate/4873", "content": "#ExploitObserverAlert\n\nCVE-2023-25790\n\nDESCRIPTION: Exploit Observer has 11 entries in 3 file formats related to CVE-2023-25790. Improper Authentication, Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xtemos WoodMart allows Cross-Site Scripting (XSS).This issue affects WoodMart: from n/a through 7.0.4.\n\nFIRST-EPSS: 0.000430000\nARPS-PRIORITY: 0.865513", "creation_timestamp": "2024-04-25T21:47:36.000000Z"}, {"uuid": "e1f7c37a-4051-4774-985c-1117b33b1ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2579", "type": "seen", "source": "https://t.me/cibsecurity/66820", "content": "\u203c CVE-2023-2579 \u203c\n\nThe InventoryPress WordPress plugin through 1.7 does not sanitise and escape some of its settings, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-17T18:40:17.000000Z"}, {"uuid": "d0f91374-86a2-4bfb-81ab-913d8a0759f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25798", "type": "seen", "source": "https://t.me/cibsecurity/63224", "content": "\u203c CVE-2023-25798 \u203c\n\nAuth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Olevmedia Olevmedia Shortcodes plugin &lt;=\u00c2\u00a01.1.9 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T16:51:32.000000Z"}, {"uuid": "b9db55b7-eb47-4b67-8a15-fcd0b1b1f9d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25796", "type": "seen", "source": "https://t.me/cibsecurity/63223", "content": "\u203c CVE-2023-25796 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Include WP BaiDu Submit plugin &lt;=\u00c2\u00a01.2.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T16:30:59.000000Z"}, {"uuid": "ed5c5706-a464-43a0-836a-6baa6a20b9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25797", "type": "seen", "source": "https://t.me/cibsecurity/63214", "content": "\u203c CVE-2023-25797 \u203c\n\nAuth. Stored Cross-Site Scripting (XSS) vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin &lt;=\u00c2\u00a04.1.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T14:31:02.000000Z"}, {"uuid": "f3169414-3d2c-422c-b128-652764a6f8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25792", "type": "seen", "source": "https://t.me/cibsecurity/63212", "content": "\u203c CVE-2023-25792 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XiaoMac WP Open Social plugin &lt;=\u00c2\u00a05.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T14:31:00.000000Z"}]}