Lucene search

MitreCVE-2022-45769

HistoryDec 05, 2022 - 11:15 p.m.

CVE-2022-45769

2022-12-0523:15:09

CWE-79

mitre

web.nvd.nist.gov

cve-2022-45769

cross-site scripting

xss

clicshopping_v3

v3.402

web vulnerability

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

34.1%

JSON

A cross-site scripting (XSS) vulnerability in ClicShopping_V3 v3.402 allows attackers to execute arbitrary web scripts or HTML via a crafted URL parameter.

Affected configurations

Nvd

Node

clicshoppingclicshopping_v3Match3.402

VendorProductVersionCPE
clicshoppingclicshopping_v33.402cpe:2.3:a:clicshopping:clicshopping_v3:3.402:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
clicshopping	clicshopping_v3	3.402	cpe:2.3:a:clicshopping:clicshopping_v3:3.402:::::::*

References

github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/clicshopping.org/2022/ClicShopping_V3

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

34.1%

JSON

Related for CVE-2022-45769