Lucene search

PatchstackCVE-2023-22707

HistoryMar 27, 2023 - 3:15 p.m.

CVE-2023-22707

2023-03-2715:15:08

CWE-79

Patchstack

web.nvd.nist.gov

cve-2023-22707

auth

cross-site scripting

xss

wpsoul greenshift

animation

page builder plugin

nvd

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

EPSS

0.001

Percentile

21.0%

JSON

Auth. (author+) Cross-Site Scripting (XSS) vulnerability in Wpsoul Greenshift – animation and page builder blocks plugin <= 4.9.9 versions.

Affected configurations

Nvd

Vulners

Node

greenshiftwpgreenshift_-_animation_and_page_builder_blocksRange≤4.9.9wordpress

VendorProductVersionCPE
greenshiftwpgreenshift_-_animation_and_page_builder_blocks*cpe:2.3:a:greenshiftwp:greenshift_-_animation_and_page_builder_blocks:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
greenshiftwp	greenshift_-_animation_and_page_builder_blocks	*	cpe:2.3:a:greenshiftwp:greenshift_-_animation_and_page_builder_blocks::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "greenshift-animation-and-page-builder-blocks",
    "product": "Greenshift – animation and page builder blocks",
    "vendor": "Wpsoul",
    "versions": [
      {
        "changes": [
          {
            "at": "5.0",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "4.9.9",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/greenshift-animation-and-page-builder-blocks/wordpress-greenshift-animation-and-page-builder-blocks-plugin-4-9-9-svg-upload-to-cross-site-scripting-xss-vulnerability?_s_id=cve