CVE-2023-33329

2023-07-1818:15:11

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-33329

admin+

cross-site scripting

hijiri custom post type generator

version 2.4.2

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

18.3%

JSON

Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Hijiri Custom Post Type Generator plugin <= 2.4.2 versions.

Affected configurations

Nvd

Node

custom_post_type_generator_projectcustom_post_type_generatorRange≤2.4.2wordpress

VendorProductVersionCPE
custom_post_type_generator_projectcustom_post_type_generator*cpe:2.3:a:custom_post_type_generator_project:custom_post_type_generator:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
custom_post_type_generator_project	custom_post_type_generator	*	cpe:2.3:a:custom_post_type_generator_project:custom_post_type_generator::::::wordpress::*

References

patchstack.com/database/vulnerability/custom-post-type-generator/wordpress-custom-post-type-generator-plugin-2-4-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve