Lucene search

[email protected]NVD:CVE-2023-44239

HistoryOct 02, 2023 - 10:15 a.m.

CVE-2023-44239

2023-10-0210:15:12

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-44239

authorization

admin

cross-site scripting

jobin jose wwm

social share

image hover

plugin

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

18.6%

JSON

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jobin Jose WWM Social Share On Image Hover plugin <= 2.2 versions.

Affected configurations

Nvd

Node

walkswithmesocial_share_on_image_hoverRange≤2.2wordpress

VendorProductVersionCPE
walkswithmesocial_share_on_image_hover*cpe:2.3:a:walkswithme:social_share_on_image_hover:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
walkswithme	social_share_on_image_hover	*	cpe:2.3:a:walkswithme:social_share_on_image_hover::::::wordpress::*

References

patchstack.com/database/vulnerability/wwm-social-share-on-image-hover/wordpress-wwm-social-share-on-image-hover-plugin-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve