Lucene search

Nguyen Anh TienPATCHSTACK:CBBFA8EA212DB0DCCA70360A22E689B6

HistoryDec 29, 2023 - 12:00 a.m.

WordPress Auto Amazon Links Plugin <= 5.1.1 is vulnerable to Cross Site Scripting (XSS)

2023-12-2900:00:00

Nguyen Anh Tien

patchstack.com

wordpress auto amazon links

plugin

cross site scripting

vulnerable

version 5.1.1

owasp top 10

injection

cve-2023-52175

low severity

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

AI Score

6.5

Confidence

High

JSON

Software

Auto Amazon Links

Type

Plugin

Vulnerable versions

<= 5.1.1

Fixed in

5.1.2

OWASP Top 10

A3: Injection

Classification

Cross Site Scripting (XSS)

CVE

CVE-2023-52175

Patch priority

Low

CVSS severity

Low (6.5)

Developer

Claim ownership

PSID

f072a5fa406e

Credits

Nguyen Anh Tien

Required privilege

Contributor

Published

29 December, 2023

Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners

Node

michael_uno_\(miunosoft\)auto_amazon_linksRange≤5.1.1

VendorProductVersionCPE
michael_uno_\(miunosoft\)auto_amazon_links*cpe:2.3:a:michael_uno_\(miunosoft\):auto_amazon_links:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
michael_uno_\(miunosoft\)	auto_amazon_links	*	cpe:2.3:a:michael_uno_\(miunosoft\):auto_amazon_links::::::::

References

wordpress.org/plugins/amazon-auto-links/#developers

www.cve.org/CVERecord?id=CVE-2023-52175