Yassir Sbai Fahim (iduzzel)

Yassir Sbai Fahim (iduzzel) is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,190 of 3,515 contributors. The disclosure was published in 2023.

Their research concentrates on Cross-Site Scripting, which accounts for 2 of their findings (67%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor. The average CVSS score across these disclosures is 5.5, peaking at 6.5.

The most affected software includes E2Pdf (1), Masteriyo LMS (1), TinyMCE Custom Styles (1), across 3 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix.

2023

Critical

High

Medium

Low

Global Rank

#1190

of 3,515 researchers

Vulns

Critical0

High0

Medium3

Low0

Affected Assets

3plugins

Avg CVSS

5.5

Average score of vulnerabilities

Researcher Submissions

3 records


2023-10-09 00:00	e2pdf < 1.20.20 - Authenticated (Administrator+) Stored Cross-Site Scripting E2Pdf < 1.20.20	`CVE-2023-5229`	4.4 Medium	Yassir Sbai Fahim (iduzzel)	Yes
2023-07-03 00:00	Masteriyo - LMS for WordPress <= 1.6.7 - Sensitive Information Exposure Masteriyo LMS < 1.6.8	`CVE-2023-3345`	6.5 Medium	Yassir Sbai Fahim (iduzzel)	Yes
2023-06-19 00:00	TinyMCE Custom Styles <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting TinyMCE Custom Styles <= 1.1.3	`CVE-2023-2967`	5.5 Medium	Yassir Sbai Fahim (iduzzel)	Yes

Showing 1–3 of 3 reports