Lucene search

K
nvd[email protected]NVD:CVE-2024-30527
HistoryMay 17, 2024 - 9:15 a.m.

CVE-2024-30527

2024-05-1709:15:30
CWE-1284
web.nvd.nist.gov
3
improper validation
input vulnerability
tips and tricks hq
wp express checkout
accept paypal payments
manipulating hidden fields
cve-2024-30527

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0

Percentile

9.0%

Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) allows Manipulating Hidden Fields.This issue affects WP Express Checkout (Accept PayPal Payments): from n/a through 2.3.7.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-30527