Lucene search

K
nvd[email protected]NVD:CVE-2024-37120
HistoryJul 22, 2024 - 10:15 a.m.

CVE-2024-37120

2024-07-2210:15:05
CWE-79
web.nvd.nist.gov
7
cve-2024-37120
biplob adhikari tabs
xss vulnerability
stored xss
web page generation

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

14.5%

Improper Neutralization of Input During Web Page Generation (XSS or ‘Cross-site Scripting’) vulnerability in Biplob Adhikari Tabs allows Stored XSS.This issue affects Tabs: from n/a through 4.0.6.

Affected configurations

Nvd
Node
oxilabresponsive_tabsRange4.0.6wordpress
VendorProductVersionCPE
oxilabresponsive_tabs*cpe:2.3:a:oxilab:responsive_tabs:*:*:*:*:*:wordpress:*:*

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

14.5%

Related for NVD:CVE-2024-37120