CVE-2023-34374

MediumCVSS 5.9

Published: 10/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

21th percentile - higher than 21% of all known CVEs

The AnsPress plugin versions up to 4.3.0 contain a stored Cross-Site Scripting (XSS) vulnerability in the context of authorization (editor+).

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to update the AnsPress plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Rahul Aryan AnsPress plugin <= 4.3.0 versions.