CVE-2023-28993

2023-04-0712:15:07

CWE-79

[email protected]

web.nvd.nist.gov

ignazio scimone albo pretorio on line

vulnerability

xss

unauthenticated

plugin

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

22.6%

JSON

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ignazio Scimone Albo Pretorio On Line plugin <= 4.6.1 versions.

Affected configurations

Nvd

Node

albo_pretorio_on_line_projectalbo_pretorio_on_lineRange<4.6.2wordpress

VendorProductVersionCPE
albo_pretorio_on_line_projectalbo_pretorio_on_line*cpe:2.3:a:albo_pretorio_on_line_project:albo_pretorio_on_line:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
albo_pretorio_on_line_project	albo_pretorio_on_line	*	cpe:2.3:a:albo_pretorio_on_line_project:albo_pretorio_on_line::::::wordpress::*

References

patchstack.com/database/vulnerability/albo-pretorio-on-line/wordpress-albo-pretorio-on-line-plugin-4-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve