Lucene search

[email protected]CVE-2023-46072

HistoryOct 26, 2023 - 12:15 p.m.

CVE-2023-46072

2023-10-2612:15:08

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-46072

unauth

reflected

cross-site scripting

xss

vulnerability

michael simpson

shortcodes

actions and filters

plugin

nvd

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

JSON

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin <= 2.0.9 versions.

Affected configurations

Vulners

NVD

Node

michael_simpsonadd_shortcodes_actions_and_filtersRange≤2.0.9

CPENameOperatorVersion
add_shortcodes_actions_and_filters_project:add_shortcodes_actions_and_filtersadd shortcodes actions and filters project add shortcodes actions and filtersle2.0.9

CPE	Name	Operator	Version
add_shortcodes_actions_and_filters_project:add_shortcodes_actions_and_filters	add shortcodes actions and filters project add shortcodes actions and filters	le	2.0.9

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "add-actions-and-filters",
    "product": "Add Shortcodes Actions And Filters",
    "vendor": "Michael Simpson",
    "versions": [
      {
        "lessThanOrEqual": "2.0.9",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/add-actions-and-filters/wordpress-add-shortcodes-actions-and-filters-plugin-2-0-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve