Lucene search
HistoryAug 17, 2023 - 9:15 a.m.
CVE-2023-30874
vulnerability
authenticated
cross-site scripting
gps plotter plugin
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
18.3%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Steve Curtis, St. Pete Design Gps Plotter plugin <= 5.1.4 versions.
Affected configurations
Node
stpetedesigngps_plotterRange≤5.1.4wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| stpetedesign | gps_plotter | * | cpe:2.3:a:stpetedesign:gps_plotter:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
vulnrichment
vulnrichment
cve
cve
CVE-2023-30874
2023-08-17 09:15:11
prion
prion
Cross site scripting
2023-08-17 09:15:00
wordfence
wordfence
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
18.3%
Related for NVD:CVE-2023-30874