CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
AI Score
Confidence
High
Software
ShortPixel Critical CSS
Type
Plugin
Vulnerable versions
<= 1.0.2
Fixed in
1.0.3
OWASP Top 10
A1: Broken Access Control
Classification
Broken Access Control
CVE
CVE-2024-32810
Patch priority
High
CVSS severity
High (7.6)
Developer
ShortPixel
PSID
b4665651b428
Credits
Dhabaleshwar Das
Required privilege
Subscriber
Published
22 April, 2024
Expand full details Have additional information or questions about this entry? Let us know.
We advise to mitigate or resolve the vulnerability immediately.
Vendor | Product | Version | CPE |
---|---|---|---|
shortpixel | shortpixel_critical_css | * | cpe:2.3:a:shortpixel:shortpixel_critical_css:*:*:*:*:*:*:*:* |
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
AI Score
Confidence
High