Lucene search

PatchstackCVE-2023-52188

HistoryFeb 01, 2024 - 10:15 a.m.

CVE-2023-52188

2024-02-0110:15:09

CWE-79

Patchstack

web.nvd.nist.gov

cve-2023-52188

cross-site scripting

vulnerability

russell jamieson

footer putter

nvd

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

AI Score

5.5

Confidence

High

EPSS

Percentile

14.0%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Russell Jamieson Footer Putter allows Stored XSS.This issue affects Footer Putter: from n/a through 1.17.

Affected configurations

Nvd

Vulners

Node

russelljamiesonfooter_putterRange≤1.17wordpress

VendorProductVersionCPE
russelljamiesonfooter_putter*cpe:2.3:a:russelljamieson:footer_putter:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
russelljamieson	footer_putter	*	cpe:2.3:a:russelljamieson:footer_putter::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "footer-putter",
    "product": "Footer Putter",
    "vendor": "Russell Jamieson",
    "versions": [
      {
        "lessThanOrEqual": "1.17",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/footer-putter/wordpress-footer-putter-plugin-1-17-cross-site-scripting-xss-vulnerability?_s_id=cve