Lucene search

K
patchstackWebbernautPATCHSTACK:E5118AEEBAE714C6A058DD0D2AE16CF1
HistoryAug 15, 2024 - 12:00 a.m.

WordPress ElementsKit Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)

2024-08-1500:00:00
Webbernaut
patchstack.com
wordpress elementskit pro
plugin
cross site scripting
vulnerable
version 3.6.5
fixed version 3.6.6
owasp top 10
cve-2024-7064
low priority

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

5.8

Confidence

High

Software

ElementsKit Pro

Type

Plugin

Vulnerable versions

<= 3.6.5

Fixed in

3.6.6

OWASP Top 10

A7: Cross-Site Scripting (XSS)

Classification

Cross Site Scripting (XSS)

CVE

CVE-2024-7064

Patch priority

Low

CVSS severity

Low (6.5)

Developer

Claim ownership

PSID

ae540cd84ef6

Credits

Webbernaut

Required privilege

Contributor

Published

15 August, 2024

Vulnerability details

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners
Node
-elementskit_proRange3.6.5
VendorProductVersionCPE
-elementskit_pro*cpe:2.3:a:-:elementskit_pro:*:*:*:*:*:*:*:*

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

5.8

Confidence

High

Related for PATCHSTACK:E5118AEEBAE714C6A058DD0D2AE16CF1