Lucene search

PatchstackCVE-2023-32957

HistoryNov 16, 2023 - 8:15 p.m.

CVE-2023-32957

2023-11-1620:15:27

CWE-79

Patchstack

web.nvd.nist.gov

cve

2023

32957

auth

stored xss

dazzlersoft team members showcase

nvd

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

AI Score

4.9

Confidence

High

EPSS

Percentile

14.0%

JSON

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Dazzlersoft Team Members Showcase plugin <= 1.3.4 versions.

Affected configurations

Nvd

Vulners

Node

dazzlersoftteam_members_showcaseRange≤1.3.4wordpress

VendorProductVersionCPE
dazzlersoftteam_members_showcase*cpe:2.3:a:dazzlersoft:team_members_showcase:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
dazzlersoft	team_members_showcase	*	cpe:2.3:a:dazzlersoft:team_members_showcase::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "dazzlersoft-teams",
    "product": "Team Members Showcase",
    "vendor": "Dazzlersoft",
    "versions": [
      {
        "lessThanOrEqual": "1.3.4",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/dazzlersoft-teams/wordpress-team-members-showcase-plugin-1-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve