CVE-2023-34187

MediumCVSS 5.9

Published: 30/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

28th percentile - higher than 28% of all known CVEs

The Alan Tien Call Now Icon Animate plugin versions <= 0.1.0 has a stored Cross-Site Scripting (XSS) vulnerability with authentication (admin+).

An attacker with admin panel access could inject malicious code, potentially leading to data theft or session hijacking.

It is recommended to update the plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alan Tien Call Now Icon Animate plugin <= 0.1.0 versions.