CVE-2023-44984

2023-10-1611:15:44

CWE-79

Patchstack

web.nvd.nist.gov

cve-2023-44984

auth

contributor

stored cross-site scripting

xss vulnerability

robin wilson

bbp style pack plugin

nvd

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

18.6%

JSON

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Robin Wilson bbp style pack plugin <= 5.6.7 versions.

Affected configurations

Nvd

Vulners

Node

rewwebbbp_style_packRange<5.6.8wordpress

VendorProductVersionCPE
rewwebbbp_style_pack*cpe:2.3:a:rewweb:bbp_style_pack:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
rewweb	bbp_style_pack	*	cpe:2.3:a:rewweb:bbp_style_pack::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "bbp-style-pack",
    "product": "bbp style pack",
    "vendor": "Robin Wilson",
    "versions": [
      {
        "changes": [
          {
            "at": "5.6.8",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "5.6.7",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]