CVE-2023-28750

2023-06-2212:15:11

CWE-79

[email protected]

web.nvd.nist.gov

cross-site scripting

unauthenticated

ignazio scimone albo pretorio on line plugin

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

18.8%

JSON

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ignazio Scimone Albo Pretorio On line plugin <= 4.6 versions.

Affected configurations

Nvd

Node

albo_pretorio_on_line_projectalbo_pretorio_on_lineRange≤4.6wordpress

VendorProductVersionCPE
albo_pretorio_on_line_projectalbo_pretorio_on_line*cpe:2.3:a:albo_pretorio_on_line_project:albo_pretorio_on_line:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
albo_pretorio_on_line_project	albo_pretorio_on_line	*	cpe:2.3:a:albo_pretorio_on_line_project:albo_pretorio_on_line::::::wordpress::*

References

patchstack.com/database/vulnerability/albo-pretorio-on-line/wordpress-albo-pretorio-on-line-plugin-4-6-cross-site-scripting-xss-vulnerability?_s_id=cve