CVE-2023-27439

2023-06-2113:15:09

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-27439

authentication

admin+

stored xss

cross-site scripting

vulnerability

gl_spice new adman plugin

nvd

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

0.0005 Low

EPSS

Percentile

16.1%

JSON

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gl_SPICE New Adman plugin <= 1.6.8 versions.

Affected configurations

Vulners

NVD

Node

gl_spicenew_admanRange≤1.6.8

CPENameOperatorVersion
new_adman_project:new_admannew adman project new admanle1.6.8

CPE	Name	Operator	Version
new_adman_project:new_adman	new adman project new adman	le	1.6.8

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "new-adman",
    "product": "New Adman",
    "vendor": "gl_SPICE",
    "versions": [
      {
        "lessThanOrEqual": "1.6.8",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]