Lucene search
HistoryOct 18, 2023 - 9:15 a.m.
CVE-2023-45054
cross-site scripting
awesome togi
product category tree
vulnerability
unauthenticated
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
20.2%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in AWESOME TOGI Product Category Tree plugin <= 2.5 versions.
Affected configurations
Node
awesometogiproduct-category-treeRange≤2.5wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| awesometogi | product-category-tree | * | cpe:2.3:a:awesometogi:product-category-tree:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
vulnrichment
vulnrichment
cve
cve
CVE-2023-45054
2023-10-18 09:15:08
prion
prion
Cross site scripting
2023-10-18 09:15:00
wpvulndb
wpvulndb
Product Category Tree <= 2.5 - Reflected XSS
2023-10-20 00:00:00
wordfence
wordfence
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
20.2%
Related for NVD:CVE-2023-45054