Lucene search

K
cvelistPatchstackCVELIST:CVE-2023-29170
HistoryApr 07, 2023 - 2:35 p.m.

CVE-2023-29170 WordPress Product Enquiry for WooCommerce Plugin <= 2.2.12 is vulnerable to Cross Site Scripting (XSS)

2023-04-0714:35:55
CWE-79
Patchstack
www.cve.org
4
wordpress
woocommerce
xss
vulnerability
product enquiry

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

EPSS

0.001

Percentile

17.5%

Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in PI Websolution Product Enquiry for WooCommerce, WooCommerce product catalog plugin <=Β 2.2.12 versions.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "enquiry-quotation-for-woocommerce",
    "product": "Product Enquiry for WooCommerce, WooCommerce product catalog",
    "vendor": "PI Websolution",
    "versions": [
      {
        "changes": [
          {
            "at": "2.2.13",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.2.12",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

EPSS

0.001

Percentile

17.5%

Related for CVELIST:CVE-2023-29170