Lucene search
WordfenceCVELIST:CVE-2021-38328HistorySep 10, 2021 - 1:33 p.m.
CVE-2021-38328 Notices <= 6.1 Reflected Cross-Site Scripting
2021-09-1013:33:35
CWE-79
Wordfence
www.cve.org
3
cve-2021-38328
reflected cross-site scripting
notices wordpress plugin
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
32.7%
The Notices WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER[“PHP_SELF”] value in the ~/notices.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 6.1.
CNA Affected
[
{
"product": "Notices",
"vendor": "Notices",
"versions": [
{
"lessThanOrEqual": "6.1",
"status": "affected",
"version": "6.1",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2021-38328
2021-09-10 14:15:09
patchstack
patchstack
cve
cve
CVE-2021-38328
2021-09-10 14:15:09
prion
prion
Cross site scripting
2021-09-10 14:15:00
wpvulndb
wpvulndb
Notices <= 6.1 - Reflected Cross-Site Scripting
2021-09-09 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
32.7%
Related for CVELIST:CVE-2021-38328