CVE-2023-47242

2023-11-1619:15:08

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-47242

auth

stored xss

marco milesi

anac

xml

bandi di gara

plugin

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions.

Affected configurations

Vulners

NVD

Node

marco_milesianac_xml_bandi_di_garaRange≤7.5

CPENameOperatorVersion
marcomilesi:anac_xml_bandi_di_garamarcomilesi anac xml bandi di garale7.5

CPE	Name	Operator	Version
marcomilesi:anac_xml_bandi_di_gara	marcomilesi anac xml bandi di gara	le	7.5

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "avcp",
    "product": "ANAC XML Bandi di Gara",
    "vendor": "Marco Milesi",
    "versions": [
      {
        "lessThanOrEqual": "7.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]