CVE-2023-30784

2023-08-1610:15:21

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-30784

authentication

contributor

cross-site scripting

xss

vulnerability

kaya studio

qr code generator

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

0.0004 Low

EPSS

Percentile

14.1%

JSON

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kaya Studio Kaya QR Code Generator plugin <= 1.5.2 versions.

Affected configurations

Vulners

NVD

Node

kaya_studiokaya_qr_code_generatorRange≤1.5.2

CPENameOperatorVersion
kayastudio:kaya_qr_code_generatorkayastudio kaya qr code generatorle1.5.2

CPE	Name	Operator	Version
kayastudio:kaya_qr_code_generator	kayastudio kaya qr code generator	le	1.5.2

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "kaya-qr-code-generator",
    "product": "Kaya QR Code Generator",
    "vendor": "Kaya Studio",
    "versions": [
      {
        "changes": [
          {
            "at": "1.5.3",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.5.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/kaya-qr-code-generator/wordpress-kaya-qr-code-generator-plugin-1-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve