Lucene search
PatchstackCVE-2023-28995HistoryJul 10, 2023 - 4:15 p.m.
CVE-2023-28995
2023-07-1016:15:50
CWE-352
Patchstack
web.nvd.nist.gov
10
cve
2023
28995
csrf
keith solomon
configurable tag cloud
ctc
plugin
security vulnerability
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.001
Percentile
28.1%
Cross-Site Request Forgery (CSRF) vulnerability in Keith Solomon Configurable Tag Cloud (CTC) plugin <= 5.2 versions.
Affected configurations
Node
configurable_tag_cloud_projectconfigurable_tag_cloudRange<5.3wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| configurable_tag_cloud_project | configurable_tag_cloud | * | cpe:2.3:a:configurable_tag_cloud_project:configurable_tag_cloud:*:*:*:*:*:wordpress:*:* |
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "configurable-tag-cloud-widget",
"product": "Configurable Tag Cloud (CTC)",
"vendor": "Keith Solomon",
"versions": [
{
"changes": [
{
"at": "5.3",
"status": "unaffected"
}
],
"lessThanOrEqual": "5.2",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2023-28995
2023-07-10 16:15:50
prion
prion
Cross site request forgery (csrf)
2023-07-10 16:15:00
cvelist
cvelist
wpvulndb
wpvulndb
Configurable Tag Cloud < 5.3 - Cross-Site Request Forgery
2023-03-30 00:00:00
wordfence
wordfence
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.001
Percentile
28.1%
Related for CVE-2023-28995