LEE SE HYOUNG (hackintoanetwork)PATCHSTACK:06280FE228963627D000304429AF036FWordPress BBS e-Popup Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
AI Score
Confidence
High
Software
BBS e-Popup
Type
Plugin
Vulnerable versions
<= 2.4.5
Fixed in
N/A
OWASP Top 10
A7: Cross-Site Scripting (XSS)
Classification
Cross Site Scripting (XSS)
CVE
CVE-2023-34174
Patch priority
Medium
CVSS severity
Medium (7.1)
Developer
Claim ownership
PSID
96c0636c0d1f
Credits
LEE SE HYOUNG (hackintoanetwork)
Required privilege
Unauthenticated
Published
30 May, 2023
Expand full details Have additional information or questions about this entry? Let us know.
Solution
We advise to mitigate or resolve the vulnerability immediately.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bbsetheme | bbs_e-popup | * | cpe:2.3:a:bbsetheme:bbs_e-popup:*:*:*:*:*:wordpress:*:* |
References
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
AI Score
Confidence
High