Lucene search

K
patchstackLucio SรกPATCHSTACK:4C63DF2F7BC665F84A4A355669928CAB
HistoryMay 09, 2024 - 12:00 a.m.

WordPress Pure Chat Plugin <= 2.22 is vulnerable to Cross Site Scripting (XSS)

2024-05-0900:00:00
Lucio Sรก
patchstack.com
pure chat
plugin
vulnerable versions
fixed in
cross site scripting
xss
owasp top 10
cve-2024-3595
patch priority
cvss severity
medium
developer
psid
subscriber
published
mitigate

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

5.6

Confidence

High

Software

Pure Chat

Type

Plugin

Vulnerable versions

<= 2.22

Fixed in

2.23

OWASP Top 10

A7: Cross-Site Scripting (XSS)

Classification

Cross Site Scripting (XSS)

CVE

CVE-2024-3595

Patch priority

Medium

CVSS severity

Medium (6.5)

Developer

Claim ownership

PSID

ddb44562eab6

Credits

Lucio Sรก

Required privilege

Subscriber

Published

9 May, 2024

Vulnerability details

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

We advise to mitigate or resolve the vulnerability immediately.

Affected configurations

Vulners
Node
pure_chat_by_rubypure_chatRangeโ‰ค2.22
VendorProductVersionCPE
pure_chat_by_rubypure_chat*cpe:2.3:a:pure_chat_by_ruby:pure_chat:*:*:*:*:*:*:*:*

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

5.6

Confidence

High

Related for PATCHSTACK:4C63DF2F7BC665F84A4A355669928CAB