Lucene search
WordfenceCVELIST:CVE-2021-38357HistorySep 10, 2021 - 1:34 p.m.
CVE-2021-38357 SMS OVH <= 0.1 Reflected Cross-Site Scripting
2021-09-1013:34:58
CWE-79
Wordfence
www.cve.org
1
sms ovh
wordpress
cve-2021-38357
reflected cross-site scripting
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
29.3%
The SMS OVH WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the ~/sms-ovh-sent.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.1.
CNA Affected
[
{
"product": "SMS OVH",
"vendor": "SMS OVH",
"versions": [
{
"lessThanOrEqual": "0.1",
"status": "affected",
"version": "0.1",
"versionType": "custom"
}
]
}
]Related
wpvulndb
wpvulndb
SMS OVH <= 0.1 - Reflected Cross-Site Scripting
2021-09-09 00:00:00
patchstack
patchstack
cve
cve
CVE-2021-38357
2021-09-10 14:15:11
nvd
nvd
CVE-2021-38357
2021-09-10 14:15:11
prion
prion
Cross site scripting
2021-09-10 14:15:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
29.3%
Related for CVELIST:CVE-2021-38357