Lucene search
WPScanCVE-2024-6792HistorySep 06, 2024 - 6:15 a.m.
CVE-2024-6792
2024-09-0606:15:02
WPScan
web.nvd.nist.gov
27
wordpress plugin
user display names
sanitization issue
public page
CVSS3
3.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
AI Score
6.4
Confidence
High
EPSS
0
Percentile
9.5%
The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public page.
Affected configurations
Node
wpulikewp_ulikeRange4.7.1–4.7.2.1wordpress
CNA Affected
[
{
"vendor": "Unknown",
"product": "WP ULike",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "4.7.1",
"lessThan": "4.7.2.1"
}
],
"defaultStatus": "unaffected"
}
]Related
nvd
nvd
CVE-2024-6792
2024-09-06 06:15:02
vulnrichment
vulnrichment
CVE-2024-6792 WP ULike < 4.7.2.1 - Subscriber+ Stored-XSS
2024-09-06 06:00:02
cvelist
cvelist
CVE-2024-6792 WP ULike < 4.7.2.1 - Subscriber+ Stored-XSS
2024-09-06 06:00:02
CVSS3
3.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
AI Score
6.4
Confidence
High
EPSS
0
Percentile
9.5%
Related for CVE-2024-6792