cveboard RSS feed

CVE-2023-40068

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7 allows a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product with the administrative privilege.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Advanced Custom Fields

Vendor
WP Engine
Product
Advanced Custom Fields
Platforms
Unknown
Default status
Unknown
Advanced Custom Fields · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
versions 6.1.0 to 6.1.7affectedUnavailableUnavailableUnavailableNone listed

Advanced Custom Fields Pro

Vendor
WP Engine
Product
Advanced Custom Fields Pro
Platforms
Unknown
Default status
Unknown
Advanced Custom Fields Pro · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
versions 6.1.0 to 6.1.7affectedUnavailableUnavailableUnavailableNone listed