CVE-2023-1420 - Vulnerability Details

Vendors	Products
Wp-dreams	Ajax Search

Link	Providers
https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f

Type	Values Removed	Values Added
First Time appeared		Wp-dreams Wp-dreams ajax Search
CPEs	cpe:2.3:a:ajax_search_project:ajax_search:::::lite:wordpress:: cpe:2.3:a:ajax_search_project:ajax_search:::::pro:wordpress::	cpe:2.3:a:wp-dreams:ajax_search:::::lite:wordpress:: cpe:2.3:a:wp-dreams:ajax_search:::::pro:wordpress::
Vendors & Products	Ajax Search Project Ajax Search Project ajax Search	Wp-dreams Wp-dreams ajax Search

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-1420", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2023-03-15T16:23:23.134Z", "datePublished": "2023-04-24T18:30:49.881Z", "dateUpdated": "2025-02-04T18:43:06.967Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2023-04-24T18:30:49.881Z"}, "title": "Ajax Search Lite < 4.11.1, Pro < 4.26.2 - Reflected Cross-Site Scripting", "problemTypes": [{"descriptions": [{"description": "CWE-79 Cross-Site Scripting (XSS)", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "Ajax Search Lite", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThan": "4.11.1"}], "defaultStatus": "unaffected", "collectionURL": "https://wordpress.org/plugins"}, {"vendor": "Unknown", "product": "Ajax Search Pro", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThan": "4.26.2"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Ajax Search Lite WordPress plugin before 4.11.1, Ajax Search Pro WordPress plugin before 4.26.2 does not sanitise and escape a parameter before outputting it back in a response of an AJAX action, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin"}], "references": [{"url": "https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "Erwan LR (WPScan)", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:49:11.402Z"}, "title": "CVE Program Container", "references": [{"url": "https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f", "tags": ["exploit", "vdb-entry", "technical-description", "x_transferred"]}]}, {"metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-02-04T18:42:10.648012Z", "id": "CVE-2023-1420", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-04T18:43:06.967Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-1420 (string)

assignerOrgId : 1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81 (string)

state : PUBLISHED (string)

assignerShortName : WPScan (string)

dateReserved : 2023-03-15T16:23:23.134Z (string)

datePublished : 2023-04-24T18:30:49.881Z (string)

dateUpdated : 2025-02-04T18:43:06.967Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81 (string)

shortName : WPScan (string)

dateUpdated : 2023-04-24T18:30:49.881Z (string)

}

title : Ajax Search Lite < 4.11.1, Pro < 4.26.2 - Reflected Cross-Site Scripting (string)

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : CWE-79 Cross-Site Scripting (XSS) (string)

lang : en (string)

type : CWE (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Unknown (string)

product : Ajax Search Lite (string)

versions : [ »

0 : { »

status : affected (string)

versionType : custom (string)

version : 0 (string)

lessThan : 4.11.1 (string)

}

]

defaultStatus : unaffected (string)

collectionURL : https://wordpress.org/plugins (string)

}

1 : { »

vendor : Unknown (string)

product : Ajax Search Pro (string)

versions : [ »

0 : { »

status : affected (string)

versionType : custom (string)

version : 0 (string)

lessThan : 4.26.2 (string)

}

]

defaultStatus : unaffected (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : The Ajax Search Lite WordPress plugin before 4.11.1, Ajax Search Pro WordPress plugin before 4.26.2 does not sanitise and escape a parameter before outputting it back in a response of an AJAX action, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin (string)

}

]

references : [ »

0 : { »

url : https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f (string)

tags : [ »

0 : exploit (string)

1 : vdb-entry (string)

2 : technical-description (string)

]

}

]

credits : [ »

0 : { »

lang : en (string)

value : Erwan LR (WPScan) (string)

type : finder (string)

}

1 : { »

lang : en (string)

value : WPScan (string)

type : coordinator (string)

}

]

source : { »

discovery : EXTERNAL (string)

}

x_generator : { »

engine : WPScan CVE Generator (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T05:49:11.402Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f (string)

tags : [ »

0 : exploit (string)

1 : vdb-entry (string)

2 : technical-description (string)

3 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 6.1 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (string)

integrityImpact : LOW (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : NONE (string)

confidentialityImpact : LOW (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-02-04T18:42:10.648012Z (string)

id : CVE-2023-1420 (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-04T18:43:06.967Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f", "tags": ["exploit", "vdb-entry", "technical-description", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:49:11.402Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-1420", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-04T18:42:10.648012Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-04T18:42:57.677Z"}}], "cna": {"title": "Ajax Search Lite < 4.11.1, Pro < 4.26.2 - Reflected Cross-Site Scripting", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Erwan LR (WPScan)"}, {"lang": "en", "type": "coordinator", "value": "WPScan"}], "affected": [{"vendor": "Unknown", "product": "Ajax Search Lite", "versions": [{"status": "affected", "version": "0", "lessThan": "4.11.1", "versionType": "custom"}], "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected"}, {"vendor": "Unknown", "product": "Ajax Search Pro", "versions": [{"status": "affected", "version": "0", "lessThan": "4.26.2", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f", "tags": ["exploit", "vdb-entry", "technical-description"]}], "x_generator": {"engine": "WPScan CVE Generator"}, "descriptions": [{"lang": "en", "value": "The Ajax Search Lite WordPress plugin before 4.11.1, Ajax Search Pro WordPress plugin before 4.26.2 does not sanitise and escape a parameter before outputting it back in a response of an AJAX action, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-79 Cross-Site Scripting (XSS)"}]}], "providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2023-04-24T18:30:49.881Z"}}}, "cveMetadata": {"cveId": "CVE-2023-1420", "state": "PUBLISHED", "dateUpdated": "2025-02-04T18:43:06.967Z", "dateReserved": "2023-03-15T16:23:23.134Z", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "datePublished": "2023-04-24T18:30:49.881Z", "assignerShortName": "WPScan"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f (string)

tags : [ »

0 : exploit (string)

1 : vdb-entry (string)

2 : technical-description (string)

3 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T05:49:11.402Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 6.1 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (string)

integrityImpact : LOW (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : NONE (string)

confidentialityImpact : LOW (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-1420 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-02-04T18:42:10.648012Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-04T18:42:57.677Z (string)

}

]

cna : { »

title : Ajax Search Lite < 4.11.1, Pro < 4.26.2 - Reflected Cross-Site Scripting (string)

source : { »

discovery : EXTERNAL (string)

}

credits : [ »

0 : { »

lang : en (string)

type : finder (string)

value : Erwan LR (WPScan) (string)

}

1 : { »

lang : en (string)

type : coordinator (string)

value : WPScan (string)

}

]

affected : [ »

0 : { »

vendor : Unknown (string)

product : Ajax Search Lite (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 4.11.1 (string)

versionType : custom (string)

}

]

collectionURL : https://wordpress.org/plugins (string)

defaultStatus : unaffected (string)

}

1 : { »

vendor : Unknown (string)

product : Ajax Search Pro (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 4.26.2 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f (string)

tags : [ »

0 : exploit (string)

1 : vdb-entry (string)

2 : technical-description (string)

]

}

]

x_generator : { »

engine : WPScan CVE Generator (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : The Ajax Search Lite WordPress plugin before 4.11.1, Ajax Search Pro WordPress plugin before 4.26.2 does not sanitise and escape a parameter before outputting it back in a response of an AJAX action, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

description : CWE-79 Cross-Site Scripting (XSS) (string)

}

]

}

]

providerMetadata : { »

orgId : 1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81 (string)

shortName : WPScan (string)

dateUpdated : 2023-04-24T18:30:49.881Z (string)

}

cveMetadata : { »

cveId : CVE-2023-1420 (string)

state : PUBLISHED (string)

dateUpdated : 2025-02-04T18:43:06.967Z (string)

dateReserved : 2023-03-15T16:23:23.134Z (string)

assignerOrgId : 1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81 (string)

datePublished : 2023-04-24T18:30:49.881Z (string)

assignerShortName : WPScan (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wp-dreams:ajax_search:*:*:*:*:lite:wordpress:*:*", "matchCriteriaId": "29EAA46F-7186-4BE1-8F19-E262D67836FF", "versionEndExcluding": "4.11.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:wp-dreams:ajax_search:*:*:*:*:pro:wordpress:*:*", "matchCriteriaId": "BE3EA907-24EB-4CAF-9E37-F91810823565", "versionEndExcluding": "4.26.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Ajax Search Lite WordPress plugin before 4.11.1, Ajax Search Pro WordPress plugin before 4.26.2 does not sanitise and escape a parameter before outputting it back in a response of an AJAX action, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin"}], "id": "CVE-2023-1420", "lastModified": "2025-03-18T15:21:33.470", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2023-04-24T19:15:09.487", "references": [{"source": "contact@wpscan.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Modified"}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:wp-dreams:ajax_search:*:*:*:*:lite:wordpress:*:* (string)

matchCriteriaId : 29EAA46F-7186-4BE1-8F19-E262D67836FF (string)

versionEndExcluding : 4.11.1 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:wp-dreams:ajax_search:*:*:*:*:pro:wordpress:*:* (string)

matchCriteriaId : BE3EA907-24EB-4CAF-9E37-F91810823565 (string)

versionEndExcluding : 4.26.2 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : The Ajax Search Lite WordPress plugin before 4.11.1, Ajax Search Pro WordPress plugin before 4.26.2 does not sanitise and escape a parameter before outputting it back in a response of an AJAX action, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin (string)

}

]

id : CVE-2023-1420 (string)

lastModified : 2025-03-18T15:21:33.470 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.1 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 2.7 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.1 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 2.7 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2023-04-24T19:15:09.487 (string)

references : [ »

0 : { »

source : contact@wpscan.com (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://wpscan.com/vulnerability/a9a54ee5-2b80-4f55-894c-1047030eea7f (string)

}

]

sourceIdentifier : contact@wpscan.com (string)

vulnStatus : Modified (string)

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Exploitation poc

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Exploitation poc

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object