Lucene search

PatchstackCVE-2024-37120

HistoryJul 22, 2024 - 10:15 a.m.

CVE-2024-37120

2024-07-2210:15:05

CWE-79

Patchstack

web.nvd.nist.gov

xss

cross-site scripting

biplob adhikari tabs

stored xss

vulnerability

web page generation

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

EPSS

Percentile

14.5%

JSON

Improper Neutralization of Input During Web Page Generation (XSS or ‘Cross-site Scripting’) vulnerability in Biplob Adhikari Tabs allows Stored XSS.This issue affects Tabs: from n/a through 4.0.6.

Affected configurations

Nvd

Vulners

Node

oxilabresponsive_tabsRange≤4.0.6wordpress

VendorProductVersionCPE
oxilabresponsive_tabs*cpe:2.3:a:oxilab:responsive_tabs:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
oxilab	responsive_tabs	*	cpe:2.3:a:oxilab:responsive_tabs::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "vc-tabs",
    "product": "Tabs",
    "vendor": "Biplob Adhikari",
    "versions": [
      {
        "lessThanOrEqual": "4.0.6",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/vc-tabs/wordpress-tabs-plugin-4-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve