CVE-2023-23866

2023-04-2520:15:09

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-23866

authentication

stored cross-site scripting

carlos moreira

interactive geo maps plugin

version 1.5.8

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.5%

JSON

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Carlos Moreira Interactive Geo Maps plugin <= 1.5.8 versions.

Affected configurations

Nvd

Node

interactive_geo_maps_projectinteractive_geo_mapsRange<1.5.9wordpress

VendorProductVersionCPE
interactive_geo_maps_projectinteractive_geo_maps*cpe:2.3:a:interactive_geo_maps_project:interactive_geo_maps:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
interactive_geo_maps_project	interactive_geo_maps	*	cpe:2.3:a:interactive_geo_maps_project:interactive_geo_maps::::::wordpress::*

References

patchstack.com/database/vulnerability/interactive-geo-maps/wordpress-interactive-geo-maps-plugin-1-5-8-cross-site-scripting-xss-vulnerability?_s_id=cve