Lucene search

PatchstackCVE-2024-30196

HistoryMar 27, 2024 - 7:15 a.m.

CVE-2024-30196

2024-03-2707:15:56

CWE-79

Patchstack

web.nvd.nist.gov

input neutralization

appscreo easy social share buttons

reflected xss

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

AI Score

7.5

Confidence

High

EPSS

Percentile

9.0%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Appscreo Easy Social Share Buttons allows Reflected XSS.This issue affects Easy Social Share Buttons: from n/a through 9.4.

Affected configurations

Vulners

Node

appscreoeasy_social_share_buttonsRange≤9.4wordpress

VendorProductVersionCPE
appscreoeasy_social_share_buttons*cpe:2.3:a:appscreo:easy_social_share_buttons:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
appscreo	easy_social_share_buttons	*	cpe:2.3:a:appscreo:easy_social_share_buttons::::::wordpress::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Easy Social Share Buttons",
    "vendor": "Appscreo",
    "versions": [
      {
        "changes": [
          {
            "at": "9.5",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "9.4",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/easy-social-share-buttons3/wordpress-easy-social-share-buttons-plugin-9-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve