Lucene search

[email protected]CVE-2023-22705

HistoryMar 29, 2023 - 8:15 p.m.

CVE-2023-22705

2023-03-2920:15:07

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-22705

unauthenticated

reflected xss

cross-site scripting

collne inc

welcart e-commerce

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

26.9%

JSON

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Collne Inc. Welcart e-Commerce plugin <= 2.8.10 versions.

CPENameOperatorVersion
collne:welcart_e-commercecollne welcart e-commercele2.8.10
collne:welcart_e-commercecollne welcart e-commerceeq1.9.27
collne:welcart_e-commercecollne welcart e-commerceeq0.8
collne:welcart_e-commercecollne welcart e-commerceeq1.3
collne:welcart_e-commercecollne welcart e-commerceeq1.3.10
collne:welcart_e-commercecollne welcart e-commerceeq1.5.3
collne:welcart_e-commercecollne welcart e-commerceeq1.7.1
collne:welcart_e-commercecollne welcart e-commerceeq1.1.2
collne:welcart_e-commercecollne welcart e-commerceeq1.1.0
collne:welcart_e-commercecollne welcart e-commerceeq1.3.4

CPE	Name	Operator	Version
collne:welcart_e-commerce	collne welcart e-commerce	le	2.8.10
collne:welcart_e-commerce	collne welcart e-commerce	eq	1.9.27
collne:welcart_e-commerce	collne welcart e-commerce	eq	0.8
collne:welcart_e-commerce	collne welcart e-commerce	eq	1.3
collne:welcart_e-commerce	collne welcart e-commerce	eq	1.3.10
collne:welcart_e-commerce	collne welcart e-commerce	eq	1.5.3
collne:welcart_e-commerce	collne welcart e-commerce	eq	1.7.1
collne:welcart_e-commerce	collne welcart e-commerce	eq	1.1.2
collne:welcart_e-commerce	collne welcart e-commerce	eq	1.1.0
collne:welcart_e-commerce	collne welcart e-commerce	eq	1.3.4

Rows per page:

1-10 of 2131

References

patchstack.com/database/vulnerability/usc-e-shop/wordpress-welcart-e-commerce-plugin-2-8-10-cross-site-scripting-xss-vulnerability?_s_id=cve

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

26.9%

JSON

Related for CVE-2023-22705

prion1 cvelist1 wpvulndb1