Lucene search

PatchstackCVE-2023-5803

HistoryNov 30, 2023 - 4:15 p.m.

CVE-2023-5803

2023-11-3016:15:10

CWE-352

Patchstack

web.nvd.nist.gov

cve

2023

5803

csrf

vulnerability

business directory team

business directory plugin

easy listing directories

wordpress

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in Business Directory Team Business Directory Plugin – Easy Listing Directories for WordPress allows Cross-Site Request Forgery.This issue affects Business Directory Plugin – Easy Listing Directories for WordPress: from n/a through 6.3.10.

Affected configurations

Nvd

Vulners

Node

businessdirectorypluginbusiness_directoryRange≤6.3.10wordpress

VendorProductVersionCPE
businessdirectorypluginbusiness_directory*cpe:2.3:a:businessdirectoryplugin:business_directory:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
businessdirectoryplugin	business_directory	*	cpe:2.3:a:businessdirectoryplugin:business_directory::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "business-directory-plugin",
    "product": "Business Directory Plugin – Easy Listing Directories for WordPress",
    "vendor": "Business Directory Team",
    "versions": [
      {
        "lessThanOrEqual": "6.3.10",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/business-directory-plugin/wordpress-business-directory-plugin-easy-listing-directories-for-wordpress-plugin-6-3-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Related for CVE-2023-5803