Lucene search
MitreCVE-2008-0837HistoryFeb 20, 2008 - 9:44 p.m.
CVE-2008-0837
2008-02-2021:44:00
CWE-79
mitre
web.nvd.nist.gov
19
security
xss
vulnerability
john godley
search unleashed
wordpress
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.004
Percentile
75.1%
Cross-site scripting (XSS) vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, which is not properly handled when the administrator views the log file.
Affected configurations
Node
john_godleysearch_unleashedMatch0.2.10
ORwordpresssearch_unleashed_pluginMatch0.2.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| john_godley | search_unleashed | 0.2.10 | cpe:2.3:a:john_godley:search_unleashed:0.2.10:*:*:*:*:*:*:* |
| wordpress | search_unleashed_plugin | 0.2.10 | cpe:2.3:a:wordpress:search_unleashed_plugin:0.2.10:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2008-0837
2008-02-20 21:00:00
patchstack
patchstack
WordPress Search Unleashed Plugin <= 0.2.10 - XSS
2008-02-20 00:00:00
prion
prion
Cross site scripting
2008-02-20 21:44:00
nvd
nvd
CVE-2008-0837
2008-02-20 21:44:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.004
Percentile
75.1%
Related for CVE-2008-0837