Lucene search

K
nvd[email protected]NVD:CVE-2024-44008
HistorySep 17, 2024 - 11:15 p.m.

CVE-2024-44008

2024-09-1723:15:19
CWE-79
web.nvd.nist.gov
3
cve-2024-44008
vulnerability
geo mashup
stored xss

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

14.7%

Improper Neutralization of Input During Web Page Generation (XSS or ‘Cross-site Scripting’) vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through 1.13.12.

Affected configurations

Nvd
Node
cyberhobogeo_mashupRange<1.13.13wordpress
VendorProductVersionCPE
cyberhobogeo_mashup*cpe:2.3:a:cyberhobo:geo_mashup:*:*:*:*:*:wordpress:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

14.7%

Related for NVD:CVE-2024-44008