Lucene search
PatchstackCVELIST:CVE-2023-41861HistorySep 26, 2023 - 7:41 a.m.
CVE-2023-41861 WordPress Restrict Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)
2023-09-2607:41:45
CWE-79
Patchstack
www.cve.org
wordpress
restrict plugin
vulnerable
unauthenticated
cross-site scripting
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
0.0005 Low
EPSS
Percentile
17.1%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Restrict plugin <= 2.2.4 versions.
CNA Affected
[
{
"collectionURL": "https://wordpress.org/plugins",
"defaultStatus": "unaffected",
"packageName": "restricted-content",
"product": "Restrict",
"vendor": "Restrict",
"versions": [
{
"changes": [
{
"at": "2.2.5",
"status": "unaffected"
}
],
"lessThanOrEqual": "2.2.4",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2023-41861
2023-09-27 15:19:30
prion
prion
Cross site scripting
2023-09-27 15:19:00
wpvulndb
wpvulndb
Restrict < 2.2.5 - Reflected XSS
2023-09-26 00:00:00
nvd
nvd
CVE-2023-41861
2023-09-27 15:19:30
wordfence
wordfence
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
0.0005 Low
EPSS
Percentile
17.1%
Related for CVELIST:CVE-2023-41861