Lucene search
MitreCVE-2023-39676HistorySep 08, 2023 - 2:15 p.m.
CVE-2023-39676
2023-09-0814:15:11
CWE-79
mitre
web.nvd.nist.gov
15
cve-2023-39676
nvd
fieldpopupnewsletter
prestashop
module
xss
vulnerability
ajax.php
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.002
Percentile
57.1%
FieldPopupNewsletter Prestashop Module v1.0.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback parameter at ajax.php.
Affected configurations
Node
fieldthemesfieldpopupnewsletterMatch1.0.0prestashop
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fieldthemes | fieldpopupnewsletter | 1.0.0 | cpe:2.3:a:fieldthemes:fieldpopupnewsletter:1.0.0:*:*:*:*:prestashop:*:* |
Related
cvelist
cvelist
CVE-2023-39676
2023-09-08 00:00:00
nuclei
nuclei
PrestaShop fieldpopupnewsletter Module - Cross Site Scripting
2023-09-07 09:43:17
nvd
nvd
CVE-2023-39676
2023-09-08 14:15:11
prion
prion
Cross site scripting
2023-09-08 14:15:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.002
Percentile
57.1%
Related for CVE-2023-39676