Lucene search
HistoryMar 27, 2024 - 12:15 p.m.
CVE-2024-29813
cve-2024-29813
cross-site scripting
cartflows inc.
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
EPSS
0
Percentile
9.0%
Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in CartFlows Inc. Funnel Builder by CartFlows allows Stored XSS.This issue affects Funnel Builder by CartFlows: from n/a through 2.0.1.
Related
wpvulndb
wpvulndb
Funnel Builder by CartFlows < 2.0.2 - Editor+ Stored XSS
2024-03-29 00:00:00
cve
cve
CVE-2024-29813
2024-03-27 12:15:08
cvelist
cvelist
vulnrichment
vulnrichment
wordfence
wordfence
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-29813