Lucene search
HistoryOct 29, 2024 - 2:15 p.m.
CVE-2024-49632
cve-2024-49632
web page generation
xss
cross-site scripting
coral web design cwd 3d image gallery
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
18.0%
Improper Neutralization of Input During Web Page Generation (XSS or ‘Cross-site Scripting’) vulnerability in Coral Web Design CWD 3D Image Gallery allows Reflected XSS.This issue affects CWD 3D Image Gallery: from n/a through 1.0.
Affected configurations
Node
coralwebdesigncwd_3d_image_galleryRange≤1.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| coralwebdesign | cwd_3d_image_gallery | * | cpe:2.3:a:coralwebdesign:cwd_3d_image_gallery:*:*:*:*:*:wordpress:*:* |
Related
cve
cve
CVE-2024-49632
2024-10-29 14:15:07
vulnrichment
vulnrichment
cvelist
cvelist
patchstack
patchstack
wordfence
wordfence
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
18.0%
Related for NVD:CVE-2024-49632