Lucene search

PatchstackCVELIST:CVE-2024-35643

HistoryJun 03, 2024 - 6:50 a.m.

CVE-2024-35643 WordPress WP Back Button plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability

2024-06-0306:50:06

Patchstack

www.cve.org

cve-2024-35643

cross site scripting

xabier miranda

stored xss

security vulnerability

wordpress

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

AI Score

5.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Cross Site Scripting (XSS) vulnerability in Xabier Miranda WP Back Button allows Stored XSS.This issue affects WP Back Button: from n/a through 1.1.3.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wp-back-button",
    "product": "WP Back Button",
    "vendor": "Xabier Miranda",
    "versions": [
      {
        "lessThanOrEqual": "1.1.3",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/wp-back-button/wordpress-wp-back-button-plugin-1-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve