Lucene search

[email protected]CVE-2023-47697

HistoryNov 13, 2023 - 11:15 p.m.

CVE-2023-47697

2023-11-1323:15:08

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-47697

unauthenticated

reflected xss

wordpress

event manager

event calendar

registrations

sell tickets

woocommerce

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.3 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.0005 Low

EPSS

Percentile

15.9%

JSON

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin <= 3.1.39 versions.

CPENameOperatorVersion
wp-eventmanager:wp_event_managerwp-eventmanager wp event managerle3.1.39
wp-eventmanager:wp_event_managerwp-eventmanager wp event managereq3.1.24
wp-eventmanager:wp_event_managerwp-eventmanager wp event managereq3.1.30
wp-eventmanager:wp_event_managerwp-eventmanager wp event managereq3.1.18
wp-eventmanager:wp_event_managerwp-eventmanager wp event managereq2.1
wp-eventmanager:wp_event_managerwp-eventmanager wp event managereq3.1.12
wp-eventmanager:wp_event_managerwp-eventmanager wp event managereq3.0
wp-eventmanager:wp_event_managerwp-eventmanager wp event managereq3.1.29
wp-eventmanager:wp_event_managerwp-eventmanager wp event managereq3.1.2
wp-eventmanager:wp_event_managerwp-eventmanager wp event managereq3.1.1

CPE	Name	Operator	Version
wp-eventmanager:wp_event_manager	wp-eventmanager wp event manager	le	3.1.39
wp-eventmanager:wp_event_manager	wp-eventmanager wp event manager	eq	3.1.24
wp-eventmanager:wp_event_manager	wp-eventmanager wp event manager	eq	3.1.30
wp-eventmanager:wp_event_manager	wp-eventmanager wp event manager	eq	3.1.18
wp-eventmanager:wp_event_manager	wp-eventmanager wp event manager	eq	2.1
wp-eventmanager:wp_event_manager	wp-eventmanager wp event manager	eq	3.1.12
wp-eventmanager:wp_event_manager	wp-eventmanager wp event manager	eq	3.0
wp-eventmanager:wp_event_manager	wp-eventmanager wp event manager	eq	3.1.29
wp-eventmanager:wp_event_manager	wp-eventmanager wp event manager	eq	3.1.2
wp-eventmanager:wp_event_manager	wp-eventmanager wp event manager	eq	3.1.1

Rows per page:

1-10 of 551

References

patchstack.com/database/vulnerability/wp-event-manager/wordpress-wp-event-manager-plugin-3-1-39-cross-site-scripting-xss-vulnerability?_s_id=cve

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.3 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.0005 Low

EPSS

Percentile

15.9%

JSON

Related for CVE-2023-47697

wpvulndb1 cvelist1 prion1 osv1