← All advisories

High severity7.1NVD Advisory· Published Aug 8, 2023· Updated Jun 17, 2026

CVE-2023-38384

CVE-2023-38384

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Syntactics, Inc. EaSYNC plugin <= 1.3.7 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Syntacticsinc/Easync2 versions
cpe:2.3:a:syntacticsinc:easync:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:syntacticsinc:easync:*:*:*:*:*:wordpress:*:*range: <=1.3.7
- (no CPE)range: n/a
WordPress/EaSYNC pluginllm-create
Range: <=1.3.7

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/easync-booking/wordpress-easync-plugin-1-3-6-reflected-cross-site-scripting-xss-vulnerability-2nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.