Lucene search
HistoryApr 06, 2023 - 6:15 a.m.
CVE-2023-23972
cve-2023-23972
authentication
admin+
vulnerability
cross-site scripting
smplug-in
social
like box
page
wpdevart
plugin
security
4.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
21.2%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin <= 0.8.39 versions.
Affected configurations
Node
wpdevartsocial_like_box_and_pageRange≤0.8.39wordpress
Related
wpvulndb
wpvulndb
Social Like Box and Page by WpDevArt < 0.8.40 - Admin+ Stored XSS
2023-01-20 00:00:00
cvelist
cvelist
cve
cve
CVE-2023-23972
2023-04-06 06:15:08
prion
prion
Cross site scripting
2023-04-06 06:15:00
4.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
21.2%
Related for NVD:CVE-2023-23972