WordPress Plugin Vulnerabilities

93digital Typing Effect < 1.3.7 - Contributor+ Stored XSS

Description

The plugin does not properly sanitize user input, leading to a potential Cross-Site Scripting (XSS) vulnerability.

Affects Plugins

Plugin icon
animated-typing-effect
Fixed in 1.3.7

References

CVE
CVE-2023-40605
URL
https://patchstack.com/database/vulnerability/animated-typing-effect/wordpress-typing-effect-plugin-1-3-6-cross-site-scripting-xss-vulnerability

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.5 (medium)

Miscellaneous

Original Researcher
yuyudhn
Verified
No
WPVDB ID
afb272c8-229d-48e6-a81a-3a43046bc31b

Timeline

Publicly Published
2023-08-17 (about 2 years ago)
Added
2023-09-27 (about 2 years ago)
Last Updated
2023-10-31 (about 2 years ago)

Other

Published
Title
Published
2022-10-24
Title
Advanced Floating Content < 1.2.2 - Contributor+ XSS
Published
2023-04-13
Title
ShiftController Employee Shift Scheduling < 4.9.26 - Reflected Cross-Site Scripting
Published
2024-04-12
Title
WP Google Analytics Events < 2.8.1 - Reflected Cross-Site Scripting
Published
2025-02-14
Title
Timeline Block < 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-06-05
Title
Image Hover Effects for Elementor with Lightbox and Flipbox <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id, oxi_addons_f_title_tag, and content_description_tag Parameters