Lucene search

[email protected]CVE-2023-52175

HistoryFeb 01, 2024 - 10:15 a.m.

CVE-2023-52175

2024-02-0110:15:08

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-52175

web page generation

cross-site scripting

security vulnerability

amazon associates affiliate plugin

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

6.9 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.0004 Low

EPSS

Percentile

13.7%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Michael Uno (miunosoft) Auto Amazon Links – Amazon Associates Affiliate Plugin allows Stored XSS.This issue affects Auto Amazon Links – Amazon Associates Affiliate Plugin: from n/a through 5.1.1.

CPENameOperatorVersion
michaeluno:auto_amazon_linksmichaeluno auto amazon linkslt5.1.2
michaeluno:auto_amazon_linksmichaeluno auto amazon linkseq3.3.1
michaeluno:auto_amazon_linksmichaeluno auto amazon linkseq3.6.4
michaeluno:auto_amazon_linksmichaeluno auto amazon linkseq4.3.5
michaeluno:auto_amazon_linksmichaeluno auto amazon linkseq4.5.6
michaeluno:auto_amazon_linksmichaeluno auto amazon linkseq4.0.3
michaeluno:auto_amazon_linksmichaeluno auto amazon linkseq3.12.0
michaeluno:auto_amazon_linksmichaeluno auto amazon linkseq3.3.2
michaeluno:auto_amazon_linksmichaeluno auto amazon linkseq4.0.5
michaeluno:auto_amazon_linksmichaeluno auto amazon linkseq3.8.7

CPE	Name	Operator	Version
michaeluno:auto_amazon_links	michaeluno auto amazon links	lt	5.1.2
michaeluno:auto_amazon_links	michaeluno auto amazon links	eq	3.3.1
michaeluno:auto_amazon_links	michaeluno auto amazon links	eq	3.6.4
michaeluno:auto_amazon_links	michaeluno auto amazon links	eq	4.3.5
michaeluno:auto_amazon_links	michaeluno auto amazon links	eq	4.5.6
michaeluno:auto_amazon_links	michaeluno auto amazon links	eq	4.0.3
michaeluno:auto_amazon_links	michaeluno auto amazon links	eq	3.12.0
michaeluno:auto_amazon_links	michaeluno auto amazon links	eq	3.3.2
michaeluno:auto_amazon_links	michaeluno auto amazon links	eq	4.0.5
michaeluno:auto_amazon_links	michaeluno auto amazon links	eq	3.8.7

Rows per page:

1-10 of 1881

References

patchstack.com/database/vulnerability/amazon-auto-links/wordpress-auto-amazon-links-amazon-associates-affiliate-plugin-5-0-5-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

6.9 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.0004 Low

EPSS

Percentile

13.7%

JSON

Related for CVE-2023-52175

prion1 cvelist1 wpvulndb1 osv1 wordfence1