Lucene search

K
vulnrichmentPatchstackVULNRICHMENT:CVE-2023-46153
HistoryOct 27, 2023 - 7:39 a.m.

CVE-2023-46153 WordPress User Feedback Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

2023-10-2707:39:17
CWE-79
Patchstack
github.com
1
wordpress
user feedback
cross site scripting
unauthenticated
stored cross-site scripting
cve-2023-46153

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

20.2%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in UserFeedback Team User Feedback plugin <=Β 1.0.9 versions.

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

20.2%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-46153