Lucene search

K
nvd[email protected]NVD:CVE-2022-47592
HistoryMar 20, 2023 - 12:15 p.m.

CVE-2022-47592

2023-03-2012:15:10
CWE-79
web.nvd.nist.gov
3
cve-2022-47592
reflected cross-site scripting
dmytriy.cooperman
magicform plugin

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

31.2%

Reflected Cross-Site Scripting (XSS) vulnerability in Dmytriy.Cooperman MagicForm plugin <= 0.1 versions.

Affected configurations

Nvd
Node
magicform_projectmagicformRange0.1wordpress
VendorProductVersionCPE
magicform_projectmagicform*cpe:2.3:a:magicform_project:magicform:*:*:*:*:*:wordpress:*:*

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

31.2%

Related for NVD:CVE-2022-47592