Lucene search
GoogleOSV:CVE-2023-41729HistoryOct 02, 2023 - 8:15 a.m.
CVE-2023-41729
2023-10-0208:15:38
Google
osv.dev
4
cve-2023-41729
authorization
cross-site scripting
sendpress newsletters
software
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
5.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.9%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.22.3.31 versions.
Related
cve
cve
CVE-2023-41729
2023-10-02 08:15:38
prion
prion
Cross site scripting
2023-10-02 08:15:00
wpvulndb
wpvulndb
SendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS
2023-10-02 00:00:00
nvd
nvd
CVE-2023-41729
2023-10-02 08:15:38
cvelist
cvelist
wordfence
wordfence
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
5.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.9%
Related for OSV:CVE-2023-41729