Lucene search

PatchstackCVE-2023-27621

HistoryAug 30, 2023 - 4:15 p.m.

CVE-2023-27621

2023-08-3016:15:09

CWE-79

Patchstack

web.nvd.nist.gov

cve-2023-27621

auth

stored xss

cross-site scripting

xss

mrdemonwolf livestream notice plugin

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

EPSS

0.001

Percentile

23.9%

JSON

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MrDemonWolf Livestream Notice plugin <= 1.2.0 versions.

Affected configurations

Nvd

Vulners

Node

mrdemonwolflivestream_noticeRange≤1.2.0wordpress

VendorProductVersionCPE
mrdemonwolflivestream_notice*cpe:2.3:a:mrdemonwolf:livestream_notice:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
mrdemonwolf	livestream_notice	*	cpe:2.3:a:mrdemonwolf:livestream_notice::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "livestream-notice",
    "product": "Livestream Notice",
    "vendor": "MrDemonWolf",
    "versions": [
      {
        "changes": [
          {
            "at": "1.3.0",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.2.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/livestream-notice/wordpress-livestream-notice-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve