Lucene search
HistoryOct 31, 2023 - 2:15 p.m.
CVE-2023-5238
wordpress
eventprime
html injection
security vulnerability
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.0%
The EventPrime WordPress plugin before 3.2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to an HTML Injection on the plugin in the search area of the website.
Affected configurations
Node
metagausseventprimeRange<3.2.0wordpress
Related
wpexploit
wpexploit
EventPrime < 3.2.0 - Reflected HTML Injection on keyword parameter
2023-10-09 00:00:00
prion
prion
Design/Logic Flaw
2023-10-31 14:15:00
cvelist
cvelist
wpvulndb
wpvulndb
EventPrime < 3.2.0 - Reflected HTML Injection on keyword parameter
2023-10-09 00:00:00
cve
cve
CVE-2023-5238
2023-10-31 14:15:12
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.0%
Related for NVD:CVE-2023-5238