Lucene search

PatchstackCVE-2023-28535

HistoryAug 14, 2023 - 3:15 p.m.

CVE-2023-28535

2023-08-1415:15:10

CWE-79

Patchstack

web.nvd.nist.gov

cve-2023-28535

nvd

security

xss

vulnerability

paytm

plugin

version 2.2.0

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

EPSS

0.001

Percentile

19.0%

JSON

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Paytm Paytm Payment Donation plugin <= 2.2.0 versions.

Affected configurations

Nvd

Vulners

Node

commoninjapaytm_payment_donationRange≤2.2.0wordpress

VendorProductVersionCPE
commoninjapaytm_payment_donation*cpe:2.3:a:commoninja:paytm_payment_donation:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
commoninja	paytm_payment_donation	*	cpe:2.3:a:commoninja:paytm_payment_donation::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "paytm-donation",
    "product": "Paytm Payment Donation",
    "vendor": "Paytm",
    "versions": [
      {
        "lessThanOrEqual": "2.2.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/paytm-donation/wordpress-paytm-payment-donation-plugin-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve