Lucene search

VulDBCVE-2015-10013

HistoryJan 05, 2023 - 10:15 a.m.

CVE-2015-10013

2023-01-0510:15:09

CWE-79

VulDB

web.nvd.nist.gov

vulnerability

webdevstudios

taxonomy-switcher plugin

wordpress

remote

cross-site scripting

upgrade

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

44.9%

JSON

A vulnerability was found in WebDevStudios taxonomy-switcher Plugin up to 1.0.3 on WordPress. It has been classified as problematic. Affected is the function taxonomy_switcher_init of the file taxonomy-switcher.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.4 is able to address this issue. It is recommended to upgrade the affected component. VDB-217446 is the identifier assigned to this vulnerability.

Affected configurations

Nvd

Vulners

Node

webdevstudiostaxonomy_switcherRange<1.0.4wordpress

VendorProductVersionCPE
webdevstudiostaxonomy_switcher*cpe:2.3:a:webdevstudios:taxonomy_switcher:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
webdevstudios	taxonomy_switcher	*	cpe:2.3:a:webdevstudios:taxonomy_switcher::::::wordpress::*

CNA Affected

[
  {
    "vendor": "WebDevStudios",
    "product": "taxonomy-switcher Plugin",
    "versions": [
      {
        "version": "1.0.0",
        "status": "affected"
      },
      {
        "version": "1.0.1",
        "status": "affected"
      },
      {
        "version": "1.0.2",
        "status": "affected"
      },
      {
        "version": "1.0.3",
        "status": "affected"
      }
    ]
  }
]

References

github.com/WebDevStudios/taxonomy-switcher/commit/e1a0d99f936e7427b31e210c67aeb4833d804099

github.com/WebDevStudios/taxonomy-switcher/releases/tag/1.0.4

vuldb.com/?ctiid.217446

vuldb.com/?id.217446

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

44.9%

JSON

Related for CVE-2015-10013