Lucene search

K
cvelistPatchstackCVELIST:CVE-2024-30450
HistoryMar 29, 2024 - 4:45 p.m.

CVE-2024-30450 WordPress OpenStreetMap for Gutenberg and WPBakery Page Builder plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

2024-03-2916:45:20
CWE-79
Patchstack
www.cve.org
wordpress
openstreetmap
wpbakery page builder
cross site scripting
vulnerability
step-byte-service gmbh
visual composer

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

0.0004 Low

EPSS

Percentile

9.2%

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Step-Byte-Service GmbH OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) allows Stored XSS.This issue affects OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer): from n/a through 1.1.1.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "stepbyteservice-openstreetmap",
    "product": "OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer)",
    "vendor": "Step-Byte-Service GmbH",
    "versions": [
      {
        "changes": [
          {
            "at": "1.1.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.1.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

0.0004 Low

EPSS

Percentile

9.2%

Related for CVELIST:CVE-2024-30450