Lucene search
PatchstackCVE-2023-25059HistoryApr 07, 2023 - 9:15 a.m.
CVE-2023-25059
2023-04-0709:15:07
CWE-79
Patchstack
web.nvd.nist.gov
21
cve
2023
25059
auth
admin+
stored
cross-site scripting
xss
vulnerability
avalex gmbh
avalex
automatically secure legal texts plugin
nvd
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
EPSS
0.001
Percentile
21.0%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in avalex GmbH avalex – Automatically secure legal texts plugin <= 3.0.3 versions.
Affected configurations
Node
avalexavalexRange≤3.0.3wordpress
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "avalex",
"product": "avalex – Automatically secure legal texts",
"vendor": "avalex GmbH",
"versions": [
{
"changes": [
{
"at": "3.0.4",
"status": "unaffected"
}
],
"lessThanOrEqual": "3.0.3",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
cvelist
cvelist
nvd
nvd
CVE-2023-25059
2023-04-07 09:15:07
prion
prion
Cross site scripting
2023-04-07 09:15:00
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
EPSS
0.001
Percentile
21.0%
Related for CVE-2023-25059