Lucene search

K
nvd[email protected]NVD:CVE-2023-30747
HistoryAug 15, 2023 - 1:15 p.m.

CVE-2023-30747

2023-08-1513:15:09
CWE-79
web.nvd.nist.gov
2
cve-2023-30747
unauthenticated
reflected cross-site scripting
wpgem woocommerce
easy duplicate product
plugin
version 0.3.0.0

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

27.9%

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPGem WooCommerce Easy Duplicate Product plugin <= 0.3.0.0 versions.

Affected configurations

Nvd
Node
wpgemwoocommerce_easy_duplicate_productRange0.3.0.0wordpress
VendorProductVersionCPE
wpgemwoocommerce_easy_duplicate_product*cpe:2.3:a:wpgem:woocommerce_easy_duplicate_product:*:*:*:*:*:wordpress:*:*

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

27.9%