CVE-2023-4148

Deeper analysis

The Ditty WordPress plugin before version 3.1.25 is affected by a reflected cross-site scripting vulnerability (CWE-79) tracked as CVE-2023-4148. The root cause is insufficient sanitization and escaping of certain parameters and generated URLs before they are reflected into HTML attributes, allowing malicious input to execute in the context of the victim's browser. The issue carries a CVSS 3.1 score of 6.1 with a network attack vector, low complexity, no required privileges, and required user interaction.

An unauthenticated attacker can exploit the flaw by crafting a malicious link and tricking a high-privilege user such as an administrator into clicking it. Successful exploitation results in script execution that can read sensitive data or perform actions within the WordPress administrative interface under the victim's session.

The referenced WPScan advisory identifies the affected plugin versions and indicates that the issue is resolved by updating to Ditty 3.1.25 or later. The EPSS score has remained flat at 0.1275 with no material increase observed after disclosure.