Lucene search

[email protected]NVD:CVE-2023-23875

HistoryMay 03, 2023 - 4:15 p.m.

CVE-2023-23875

2023-05-0316:15:10

CWE-79

[email protected]

web.nvd.nist.gov

vulnerability

xss

himanshu bing site verification

meta tag plugin

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

17.7%

JSON

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Himanshu Bing Site Verification plugin using Meta Tag plugin <= 1.0 versions.

Affected configurations

NVD

Node

bing_site_verification_plugin_using_meta_tag_projectbing_site_verification_plugin_using_meta_tagRange≤1.0wordpress

References

patchstack.com/database/vulnerability/bing-site-verification-using-meta-tag/wordpress-bing-site-verification-plugin-using-meta-tag-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve