Lucene search
HistoryAug 07, 2023 - 1:15 p.m.
CVE-2023-38392
cve-2023-38392
unauthenticated
reflected cross-site scripting
custom field template plugin
version 2.5.9
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.0%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Hiroaki Miyashita Custom Field Template plugin <= 2.5.9 versions.
Affected configurations
Node
wpgogocustom_field_templateRange<2.6.0wordpress
Related
cve
cve
CVE-2023-38392
2023-08-07 13:15:11
wpvulndb
wpvulndb
Custom Field Template < 2.6 - Reflected Cross-Site Scripting
2023-08-07 00:00:00
prion
prion
Cross site scripting
2023-08-07 13:15:00
cvelist
cvelist
wordfence
wordfence
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.0%
Related for NVD:CVE-2023-38392