Lucene search
HistoryNov 30, 2023 - 5:15 p.m.
CVE-2023-48317
cve-2023-48317
improper neutralization of input
web page generation
cross-site scripting
vikas vatsa display custom post
stored xss
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.0%
Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Vikas Vatsa Display Custom Post allows Stored XSS.This issue affects Display Custom Post: from n/a through 2.2.1.
Affected configurations
Node
vikasvatsadisplay_custom_postRange≤2.2.1wordpress
Related
cvelist
cvelist
cve
cve
CVE-2023-48317
2023-11-30 17:15:11
prion
prion
Cross site scripting
2023-11-30 17:15:00
wpvulndb
wpvulndb
wordfence
wordfence
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.0%
Related for NVD:CVE-2023-48317