Lucene search

K
nvd[email protected]NVD:CVE-2023-32596
HistoryAug 25, 2023 - 11:15 a.m.

CVE-2023-32596

2023-08-2511:15:08
CWE-79
web.nvd.nist.gov
2
cve-2023-32596
authentication
stored cross-site scripting
xss
wolfgang ertl
weebotlite plugin
security vulnerability

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

18.8%

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wolfgang Ertl weebotLite plugin <= 1.0.0 versions.

Affected configurations

Nvd
Node
wolfgangertlweebotliteRange1.0.0wordpress
VendorProductVersionCPE
wolfgangertlweebotlite*cpe:2.3:a:wolfgangertl:weebotlite:*:*:*:*:*:wordpress:*:*

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

18.8%

Related for NVD:CVE-2023-32596