Lucene search

K
patchstackDimas MaulanaPATCHSTACK:D8AD1055B233E842EABA44B52C0E6BC2
HistoryApr 15, 2024 - 12:00 a.m.

WordPress Tax Rate Upload Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)

2024-04-1500:00:00
Dimas Maulana
patchstack.com
wordpress
tax rate
plugin
vulnerable
cross site scripting
injection
cve-2024-32546
medium
unauthenticated
patchstack
dimas maulana
immediate mitigation

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

AI Score

6.5

Confidence

High

Software

Tax Rate Upload

Type

Plugin

Vulnerable versions

<= 2.4.5

Fixed in

N/A

OWASP Top 10

A3: Injection

Classification

Cross Site Scripting (XSS)

CVE

CVE-2024-32546

Patch priority

Medium

CVSS severity

Medium (7.1)

Developer

Claim ownership

PSID

e0f99a4ecd9c

Credits

Dimas Maulana Dimas Maulana

Required privilege

Unauthenticated

Published

15 April, 2024

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

We advise to mitigate or resolve the vulnerability immediately.

Affected configurations

Vulners
Node
-tax_rate_uploadRange2.4.5
VendorProductVersionCPE
-tax_rate_upload*cpe:2.3:a:-:tax_rate_upload:*:*:*:*:*:*:*:*

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

AI Score

6.5

Confidence

High

Related for PATCHSTACK:D8AD1055B233E842EABA44B52C0E6BC2