6.1

CVE-2023-2813: ajaydsouza connections_reloaded Cross-site Scripting

CVSS: 6.1v3.1MediumModified
Published 04-09-2023Last modified 02-08-2024
Open JSON

Vulnerability summary

CVE-2023-2813 is a medium (CVSS 6.1) Cross-site Scripting vulnerability in ajaydsouza connections_reloaded. EPSS estimates a 1.01% chance of exploitation in the next 30 days, higher than 62.6% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.1/10
010
Medium · v3.1 (NVD)
EPSS score
1.01%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 0 · Duplicates 4
CVE-2024-1788CVE-2024-1864CVE-2024-1865CVE-2024-1866

Timeline

  1. 04-09-2023
    PublishedVulnerability first disclosed.
  2. 02-08-2024
    Last modifiedVulnerability information updated.

Description

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2, BunnyPressLite WordPress theme before 2.1, Cafe Bistro WordPress theme before 1.1.4, College WordPress theme before 1.5.1, Connections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme through 1.0.8, Directory WordPress theme before 3.0.2, Drop WordPress theme before 1.22, Everse WordPress theme before 1.2.4, Fashionable Store WordPress theme through 1.3.4, Fullbase WordPress theme before 1.2.1, Ilex WordPress theme before 1.4.2, Js O3 Lite WordPress theme through 1.5.8.2, Js Paper WordPress theme through 2.5.7, Kata WordPress theme before 1.2.9, Kata App WordPress theme through 1.0.5, Kata Business WordPress theme through 1.0.2, Looki Lite WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Personal WordPress theme through 1.0.7, Offset Writing WordPress theme through 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme before 1.2.10, Plato WordPress theme before 1.1.9, Polka Dots WordPress theme through 1.2, Purity Of Soul WordPress theme through 1.9, Restaurant PT WordPress theme before 1.1.3, Saul WordPress theme before 1.1.0, Sean Lite WordPress theme before 1.4.6, Tantyyellow WordPress theme through 1.0.0.5, TIJAJI WordPress theme through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme through 1.1.3, UltraLight WordPress theme through 1.2, Venice Lite WordPress theme before 1.5.5, Viala WordPress theme through 1.3.1, viburno WordPress theme before 1.3.2, Wedding Bride WordPress theme before 1.0.2, Wlow WordPress theme before 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

1.01%

Chance of exploitation in the next 30 days

Percentile

63%

Versus all other CVEs

30-day change

0.00 pp

From 1.01% on 20-09-2026

20-09-202620-10-2026
EPSS score
1.01%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (wpscan.com)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Unknown48 products
Wordpress10 products
  • aapnaAll versions (No fix recorded)
  • anandAll versions (No fix recorded)
  • anfaustAll versions (No fix recorded)
  • arendelle< 1.1.3
  • atlast-businessAll versions (No fix recorded)
Ayecode6 products
Themeinprogress5 products
Archimidismertzanos3 products
Deothemes3 products
Asmedia2 products
Dotecsa2 products
Fyrewurks2 products
Iznyn2 products
Jinwen2 products
Marchettidesign2 products
Saumendra2 products
Thewebhunter2 products
Ajaydsouza1 product
Arthousewebdesign1 product
Climaxthemes1 product
Competethemes1 product
Davidgarlitz1 product
Fredriksoerlie1 product
Henleythemes1 product
Omarfolgheraiter1 product
Ta2g1 product
Thriveweb1 product
Tijaji1 product
Wpmole1 product
Yws1 product

27 vendors · 104 products

References

2 links