Lucene search

PatchstackCVE-2023-25028

HistoryMay 24, 2023 - 5:15 p.m.

CVE-2023-25028

2023-05-2417:15:09

CWE-79

Patchstack

web.nvd.nist.gov

cve-2023-25028

security

vulnerability

cross-site scripting

xss

chuyencode cc custom taxonomy plugin

nvd

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

EPSS

0.001

Percentile

17.6%

JSON

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in chuyencode CC Custom Taxonomy plugin <= 1.0.1 versions.

Affected configurations

Nvd

Vulners

Node

cc_custom_taxonomy_projectcc_custom_taxonomyRange≤1.0.1wordpress

VendorProductVersionCPE
cc_custom_taxonomy_projectcc_custom_taxonomy*cpe:2.3:a:cc_custom_taxonomy_project:cc_custom_taxonomy:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
cc_custom_taxonomy_project	cc_custom_taxonomy	*	cpe:2.3:a:cc_custom_taxonomy_project:cc_custom_taxonomy::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "cc-custom-taxonmy",
    "product": "CC Custom Taxonomy",
    "vendor": "chuyencode",
    "versions": [
      {
        "lessThanOrEqual": "1.0.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/cc-custom-taxonmy/wordpress-cc-custom-taxonomy-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve