Lucene search
HistoryMay 09, 2023 - 10:15 a.m.
CVE-2023-23793
cve-2023-23793
authentication
stored cross-site scripting
eightweb interactive
read more without refresh
plugin
vulnerability
versions
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.5%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eightweb Interactive Read More Without Refresh plugin <= 3.1 versions.
Affected configurations
Node
8webread_more_without_refreshRange<3.2wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| 8web | read_more_without_refresh | * | cpe:2.3:a:8web:read_more_without_refresh:*:*:*:*:*:wordpress:*:* |
Related
cve
cve
CVE-2023-23793
2023-05-09 10:15:10
cvelist
cvelist
wpvulndb
wpvulndb
Read More Without Refresh <= 3.1 - Admin+ Stored Cross-Site Scripting
2023-03-20 00:00:00
prion
prion
Cross site scripting
2023-05-09 10:15:00
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.5%
Related for NVD:CVE-2023-23793