Lucene search

PatchstackCVE-2023-23681

HistoryMar 30, 2023 - 12:15 p.m.

CVE-2023-23681

2023-03-3012:15:07

CWE-79

Patchstack

web.nvd.nist.gov

cve-2023-23681

auth

contributor+

stored

cross-site scripting

xss

vulnerability

labib ahmed

image hover effects

wpbakery page builder

nvd

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

EPSS

0.001

Percentile

21.0%

JSON

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Labib Ahmed Image Hover Effects For WPBakery Page Builder plugin <= 4.0 versions.

Affected configurations

Nvd

Vulners

Node

webdevoceanimage_hover_effects_for_wpbakery_page_builderRange<5.0wordpress

VendorProductVersionCPE
webdevoceanimage_hover_effects_for_wpbakery_page_builder*cpe:2.3:a:webdevocean:image_hover_effects_for_wpbakery_page_builder:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
webdevocean	image_hover_effects_for_wpbakery_page_builder	*	cpe:2.3:a:webdevocean:image_hover_effects_for_wpbakery_page_builder::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "image-hover-effects-visual-composer-extension",
    "product": "Image Hover Effects For WPBakery Page Builder",
    "vendor": "Labib Ahmed",
    "versions": [
      {
        "changes": [
          {
            "at": "5.0",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "4.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/image-hover-effects-visual-composer-extension/wordpress-image-hover-effects-for-wpbakery-page-builder-plugin-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve