CVE-2023-3666
Published Unknown
Actions:
Expert Analysis
Professional remediation guidance
Get tailored security recommendations from our analyst team for CVE-2023-3666. We'll provide specific mitigation strategies based on your environment and risk profile.
CVSS Score
V3.1
0.0
/10
Not Available
Base Score Metrics
Exploitability: N/A
Impact: N/A
Attack Vector Metrics
Impact Metrics
Description
The Sticky Side Buttons WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Available Exploits
No exploits available for this CVE.
Related News
No news articles found for this CVE.
EU Vulnerability Database
Monitored by ENISA for EU cybersecurity
ENISA Analysis
Malicious code in bioql (PyPI)
Affected Products (ENISA)
unknown
sticky side buttons
ENISA Scoring
CVSS Score (3.1)
3.3
/10
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
EPSS Score
0.040
probability
Data provided by ENISA EU Vulnerability Database. Last updated: October 3, 2025
Published: Unknown
Last Modified: Unknown
Copied to clipboard!