Lucene search
HistoryJun 16, 2023 - 9:15 a.m.
CVE-2023-25963
cve-2023-25963
authentication
stored cross-site scripting
joomsky js job manager
vulnerability
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
18.0%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.
Affected configurations
Node
joomskyjs_job_managerRange≤2.0.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| joomsky | js_job_manager | * | cpe:2.3:a:joomsky:js_job_manager:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Cross site scripting
2023-06-16 09:15:00
cve
cve
CVE-2023-25963
2023-06-16 09:15:09
cvelist
cvelist
wordfence
wordfence
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
18.0%
Related for NVD:CVE-2023-25963