Lucene search

K
patchstackLVT-tholv2kPATCHSTACK:EF188A7016199189AD5F6FBD97796B21
HistoryAug 26, 2024 - 12:00 a.m.

WordPress azurecurve Toggle Show/Hide Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)

2024-08-2600:00:00
LVT-tholv2k
patchstack.com
1
wordpress
azurecurve
toggle show/hide
plugin
cross site scripting
xss
vulnerable
injection
cve-2024-43961
low severity

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

AI Score

6.6

Confidence

High

Software

azurecurve Toggle Show/Hide

Type

Plugin

Vulnerable versions

<= 2.1.3

Fixed in

N/A

OWASP Top 10

A3: Injection

Classification

Cross Site Scripting (XSS)

CVE

CVE-2024-43961

Patch priority

Low

CVSS severity

Low (6.5)

Developer

Claim ownership

PSID

e99e84051c30

Credits

LVT-tholv2k LVT-tholv2k

Required privilege

Contributor

Published

26 August, 2024

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners
Node
azurecurvetoggle_show\/hideRange2.1.3wordpress
VendorProductVersionCPE
azurecurvetoggle_show\/hide*cpe:2.3:a:azurecurve:toggle_show\/hide:*:*:*:*:*:wordpress:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

AI Score

6.6

Confidence

High

Related for PATCHSTACK:EF188A7016199189AD5F6FBD97796B21