Lucene search

[email protected]NVD:CVE-2023-2813

HistorySep 04, 2023 - 12:15 p.m.

CVE-2023-2813

2023-09-0412:15:08

[email protected]

web.nvd.nist.gov

wordpress themes

security issue

unauthenticated attacker

xss

search box

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

51.2%

JSON

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2, BunnyPressLite WordPress theme before 2.1, Cafe Bistro WordPress theme before 1.1.4, College WordPress theme before 1.5.1, Connections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme through 1.0.8, Directory WordPress theme before 3.0.2, Drop WordPress theme before 1.22, Everse WordPress theme before 1.2.4, Fashionable Store WordPress theme through 1.3.4, Fullbase WordPress theme before 1.2.1, Ilex WordPress theme before 1.4.2, Js O3 Lite WordPress theme through 1.5.8.2, Js Paper WordPress theme through 2.5.7, Kata WordPress theme before 1.2.9, Kata App WordPress theme through 1.0.5, Kata Business WordPress theme through 1.0.2, Looki Lite WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Personal WordPress theme through 1.0.7, Offset Writing WordPress theme through 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme before 1.2.10, Plato WordPress theme before 1.1.9, Polka Dots WordPress theme through 1.2, Purity Of Soul WordPress theme through 1.9, Restaurant PT WordPress theme before 1.1.3, Saul WordPress theme before 1.1.0, Sean Lite WordPress theme before 1.4.6, Tantyyellow WordPress theme through 1.0.0.5, TIJAJI WordPress theme through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme through 1.1.3, UltraLight WordPress theme through 1.2, Venice Lite WordPress theme before 1.5.5, Viala WordPress theme through 1.3.1, viburno WordPress theme before 1.3.2, Wedding Bride WordPress theme before 1.0.2, Wlow WordPress theme before 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link.

Affected configurations

Nvd

Node

ajaydsouzaconnections_reloadedRange≤3.1wordpress

archimidismertzanosatlast_businessRange≤1.5.8.5wordpress

archimidismertzanosfashionable_storeRange≤1.3.4wordpress

archimidismertzanosnothing_personalRange≤1.0.7wordpress

arthousewebdesignbrain_powerRange≤1.2wordpress

asmediamoseterRange≤1.3.1wordpress

asmediatuaug4Range≤1.4wordpress

ayecodecafe_bistroRange<1.1.4wordpress

ayecodecollegeRange<1.5.1wordpress

ayecodedirectoryRange<3.0.2wordpress

ayecodeplatoRange<1.1.9wordpress

ayecoderestaurant_ptRange<1.1.3wordpress

ayecodewedding_brideRange<1.0.2wordpress

climaxthemeskataRange<1.2.9wordpress

competethemesdropRange<1.22wordpress

davidgarlitzvialaRange≤1.3.1wordpress

deothemesarendelleRange<1.1.13wordpress

deothemeseverseRange<1.2.4wordpress

deothemesnokkeRange<1.2.4wordpress

dotecsailexRange<1.4.2wordpress

dotecsaviburnoRange<1.3.2wordpress

fredriksoerlieultralightRange≤1.2wordpress

fyrewurkspolka_dotsRange≤1.2wordpress

fyrewurkstiki_timeRange≤1.3wordpress

henleythemescounterpointRange≤1.8.1wordpress

iznynopor_ayamRange≤1.8wordpress

iznynpurity_of_soulRange≤1.9wordpress

jinwenjs_o3_liteRange≤1.5.8.2wordpress

jinwenjs_paperRange≤2.5.7wordpress

marchettidesignfullbaseRange<1.2.1wordpress

marchettidesignwlowRange<1.2.7wordpress

omarfolgheraiterdigitallyRange≤1.0.8wordpress

saumendraaapnaRange≤1.3wordpress

saumendraanandRange≤1.2wordpress

ta2gtantyyellowRange≤1.0.0.5wordpress

themeinprogressbazaar_liteRange<1.8.6wordpress

themeinprogresslooki_liteRange<1.3.0wordpress

themeinprogresssaulRange<1.1.0wordpress

themeinprogresssaul_liteRange<1.4.6wordpress

themeinprogressvenice_liteRange≤1.5.5wordpress

thewebhunteranfaustRange≤1.1wordpress

thewebhunteroffset_writingRange≤1.2wordpress

thrivewebpinzoloRange<1.2.10wordpress

tijajitijajiRange≤1.43wordpress

wpmoletydskrifRange≤1.1.3wordpress

ywsbunnypress_liteRange≤2.1wordpress

VendorProductVersionCPE
ajaydsouzaconnections_reloaded*cpe:2.3:a:ajaydsouza:connections_reloaded:*:*:*:*:*:wordpress:*:*
archimidismertzanosatlast_business*cpe:2.3:a:archimidismertzanos:atlast_business:*:*:*:*:*:wordpress:*:*
archimidismertzanosfashionable_store*cpe:2.3:a:archimidismertzanos:fashionable_store:*:*:*:*:*:wordpress:*:*
archimidismertzanosnothing_personal*cpe:2.3:a:archimidismertzanos:nothing_personal:*:*:*:*:*:wordpress:*:*
arthousewebdesignbrain_power*cpe:2.3:a:arthousewebdesign:brain_power:*:*:*:*:*:wordpress:*:*
asmediamoseter*cpe:2.3:a:asmedia:moseter:*:*:*:*:*:wordpress:*:*
asmediatuaug4*cpe:2.3:a:asmedia:tuaug4:*:*:*:*:*:wordpress:*:*
ayecodecafe_bistro*cpe:2.3:a:ayecode:cafe_bistro:*:*:*:*:*:wordpress:*:*
ayecodecollege*cpe:2.3:a:ayecode:college:*:*:*:*:*:wordpress:*:*
ayecodedirectory*cpe:2.3:a:ayecode:directory:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
ajaydsouza	connections_reloaded	*	cpe:2.3:a:ajaydsouza:connections_reloaded::::::wordpress::*
archimidismertzanos	atlast_business	*	cpe:2.3:a:archimidismertzanos:atlast_business::::::wordpress::*
archimidismertzanos	fashionable_store	*	cpe:2.3:a:archimidismertzanos:fashionable_store::::::wordpress::*
archimidismertzanos	nothing_personal	*	cpe:2.3:a:archimidismertzanos:nothing_personal::::::wordpress::*
arthousewebdesign	brain_power	*	cpe:2.3:a:arthousewebdesign:brain_power::::::wordpress::*
asmedia	moseter	*	cpe:2.3:a:asmedia:moseter::::::wordpress::*
asmedia	tuaug4	*	cpe:2.3:a:asmedia:tuaug4::::::wordpress::*
ayecode	cafe_bistro	*	cpe:2.3:a:ayecode:cafe_bistro::::::wordpress::*
ayecode	college	*	cpe:2.3:a:ayecode:college::::::wordpress::*
ayecode	directory	*	cpe:2.3:a:ayecode:directory::::::wordpress::*