Lucene search

K
nvd[email protected]NVD:CVE-2023-32600
HistoryAug 06, 2023 - 12:15 a.m.

CVE-2023-32600

2023-08-0600:15:09
CWE-79
web.nvd.nist.gov
7
cve-2023-32600
authenticated
contributor
stored
cross-site scripting
xss
rank math seo plugin
version 1.0.119

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

21.5%

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Rank Math SEO plugin <= 1.0.119 versions.

Affected configurations

Nvd
Node
rankmathseoRange<1.0.119.1freewordpress
VendorProductVersionCPE
rankmathseo*cpe:2.3:a:rankmath:seo:*:*:*:*:free:wordpress:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

21.5%