CVE-2023-31076

2023-08-1709:15:12

CWE-79

Patchstack

web.nvd.nist.gov

cve-2023-31076

unauthenticated

reflected xss

really simple plugins

recipe maker

zip recipes

nvd

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

EPSS

0.001

Percentile

27.9%

JSON

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.0.6 versions.

Affected configurations

Nvd

Vulners

Node

really-simple-pluginsrecipe_maker_for_your_food_blog_from_zip_recipesRange≤8.0.6wordpress

VendorProductVersionCPE
really-simple-pluginsrecipe_maker_for_your_food_blog_from_zip_recipes*cpe:2.3:a:really-simple-plugins:recipe_maker_for_your_food_blog_from_zip_recipes:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
really-simple-plugins	recipe_maker_for_your_food_blog_from_zip_recipes	*	cpe:2.3:a:really-simple-plugins:recipe_maker_for_your_food_blog_from_zip_recipes::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "zip-recipes",
    "product": "Recipe Maker For Your Food Blog from Zip Recipes",
    "vendor": "Really Simple Plugins",
    "versions": [
      {
        "changes": [
          {
            "at": "8.0.7",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "8.0.6",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/zip-recipes/wordpress-recipe-maker-for-your-food-blog-from-zip-recipes-plugin-8-0-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve