Lucene search
HistoryApr 07, 2023 - 3:15 p.m.
CVE-2023-29171
cross-site scripting
magic post thumbnail
unauthenticated
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.6%
Unauth. Reflected Cross-site Scripting (XSS) vulnerability in Magic Post Thumbnail plugin <= 4.1.10 versions.
Affected configurations
Node
magic-post-thumbnailmagic_post_thumbnailRange<4.1.11wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| magic-post-thumbnail | magic_post_thumbnail | * | cpe:2.3:a:magic-post-thumbnail:magic_post_thumbnail:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Cross site scripting
2023-04-07 15:15:00
cvelist
cvelist
cve
cve
CVE-2023-29171
2023-04-07 15:15:08
vulnrichment
vulnrichment
wpvulndb
wpvulndb
Magic Post Thumbnail < 4.1.11 - Reflected XSS
2023-04-03 00:00:00
wordfence
wordfence
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.6%
Related for NVD:CVE-2023-29171