Lucene search

[email protected]NVD:CVE-2016-0765

HistoryJan 23, 2017 - 9:59 p.m.

CVE-2016-0765

2017-01-2321:59:00

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

58.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) action parameter.

Affected configurations

Nvd

Node

elfdeneshop_pluginMatch6.3.14wordpress

VendorProductVersionCPE
elfdeneshop_plugin6.3.14cpe:2.3:a:elfden:eshop_plugin:6.3.14:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
elfden	eshop_plugin	6.3.14	cpe:2.3:a:elfden:eshop_plugin:6.3.14:::::wordpress::

References

www.openwall.com/lists/oss-security/2016/02/02/3

www.securityfocus.com/bid/82347

www.vapid.dhs.org/advisory.php?v=160

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

58.7%

JSON

Related for NVD:CVE-2016-0765

wpvulndb1 cvelist1 prion1 cve1