Lucene search

[email protected]NVD:CVE-2023-47659

HistoryNov 14, 2023 - 5:15 p.m.

CVE-2023-47659

2023-11-1417:15:07

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-47659

authorization

stored cross-site scripting

lavacode lava directory manager

1.1.34

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

Percentile

14.0%

JSON

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Lavacode Lava Directory Manager plugin <= 1.1.34 versions.

Affected configurations

Nvd

Node

lava-codelava_directory_managerRange≤1.1.34wordpress

VendorProductVersionCPE
lava-codelava_directory_manager*cpe:2.3:a:lava-code:lava_directory_manager:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
lava-code	lava_directory_manager	*	cpe:2.3:a:lava-code:lava_directory_manager::::::wordpress::*

References

patchstack.com/database/vulnerability/lava-directory-manager/wordpress-lava-directory-manager-plugin-1-1-34-contributor-stored-cross-site-scripting-xss-vulnerability?_s_id=cve