Lucene search

[email protected]NVD:CVE-2017-2284

HistoryAug 02, 2017 - 4:29 p.m.

CVE-2017-2284

2017-08-0216:29:00

CWE-79

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

code-atlanticpopup_makerMatch1.0.0wordpress

code-atlanticpopup_makerMatch1.0.1wordpress

code-atlanticpopup_makerMatch1.0.2wordpress

code-atlanticpopup_makerMatch1.0.3wordpress

code-atlanticpopup_makerMatch1.0.4wordpress

code-atlanticpopup_makerMatch1.0.5wordpress

code-atlanticpopup_makerMatch1.1.0wordpress

code-atlanticpopup_makerMatch1.1.1wordpress

code-atlanticpopup_makerMatch1.1.2wordpress

code-atlanticpopup_makerMatch1.1.3wordpress

code-atlanticpopup_makerMatch1.1.4wordpress

code-atlanticpopup_makerMatch1.1.5wordpress

code-atlanticpopup_makerMatch1.1.6wordpress

code-atlanticpopup_makerMatch1.1.7wordpress

code-atlanticpopup_makerMatch1.1.8wordpress

code-atlanticpopup_makerMatch1.1.9wordpress

code-atlanticpopup_makerMatch1.1.10wordpress

code-atlanticpopup_makerMatch1.2.0wordpress

code-atlanticpopup_makerMatch1.2.1wordpress

code-atlanticpopup_makerMatch1.2.2wordpress

code-atlanticpopup_makerMatch1.3.0wordpress

code-atlanticpopup_makerMatch1.3.1wordpress

code-atlanticpopup_makerMatch1.3.2wordpress

code-atlanticpopup_makerMatch1.3.3wordpress

code-atlanticpopup_makerMatch1.3.4wordpress

code-atlanticpopup_makerMatch1.3.5wordpress

code-atlanticpopup_makerMatch1.3.6wordpress

code-atlanticpopup_makerMatch1.3.7wordpress

code-atlanticpopup_makerMatch1.3.8wordpress

code-atlanticpopup_makerMatch1.3.9wordpress

code-atlanticpopup_makerMatch1.4.0wordpress

code-atlanticpopup_makerMatch1.4.1wordpress

code-atlanticpopup_makerMatch1.4.2wordpress

code-atlanticpopup_makerMatch1.4.3wordpress

code-atlanticpopup_makerMatch1.4.4wordpress

code-atlanticpopup_makerMatch1.4.5wordpress

code-atlanticpopup_makerMatch1.4.6wordpress

code-atlanticpopup_makerMatch1.4.7wordpress

code-atlanticpopup_makerMatch1.4.8wordpress

code-atlanticpopup_makerMatch1.4.9wordpress

code-atlanticpopup_makerMatch1.4.10wordpress

code-atlanticpopup_makerMatch1.4.11wordpress

code-atlanticpopup_makerMatch1.4.12wordpress

code-atlanticpopup_makerMatch1.4.13wordpress

code-atlanticpopup_makerMatch1.4.14wordpress

code-atlanticpopup_makerMatch1.4.15wordpress

code-atlanticpopup_makerMatch1.4.16wordpress

code-atlanticpopup_makerMatch1.4.17wordpress

code-atlanticpopup_makerMatch1.4.18wordpress

code-atlanticpopup_makerMatch1.4.19wordpress

code-atlanticpopup_makerMatch1.4.20wordpress

code-atlanticpopup_makerMatch1.4.21wordpress

code-atlanticpopup_makerMatch1.5.0wordpress

code-atlanticpopup_makerMatch1.5.1wordpress

code-atlanticpopup_makerMatch1.5.2wordpress

code-atlanticpopup_makerMatch1.5.3wordpress

code-atlanticpopup_makerMatch1.5.4wordpress

code-atlanticpopup_makerMatch1.5.5wordpress

code-atlanticpopup_makerMatch1.5.6wordpress

code-atlanticpopup_makerMatch1.5.7wordpress

code-atlanticpopup_makerMatch1.5.8wordpress

code-atlanticpopup_makerMatch1.6.0wordpress

code-atlanticpopup_makerMatch1.6.1wordpress

code-atlanticpopup_makerMatch1.6.2wordpress

code-atlanticpopup_makerMatch1.6.3wordpress

code-atlanticpopup_makerMatch1.6.4wordpress

References

jvn.jp/en/jp/JVN92921024/index.html

plugins.trac.wordpress.org/changeset/1697216/#file3

wordpress.org/plugins/popup-maker/#developers

wpvulndb.com/vulnerabilities/8878

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

Related for NVD:CVE-2017-2284

wpvulndb1 patchstack1 cvelist1 prion1 osv1 jvn1 cve1