CVE-2023-46822

2023-11-0610:15:08

CWE-79

Patchstack

web.nvd.nist.gov

cve-2023-46822

unauthenticated

reflected cross-site scripting

visser labs

store exporter

woocommerce

nvd

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.0%

JSON

Unauth. Reflected Cross-Site Scripting’) vulnerability in Visser Labs Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin <= 2.7.2 versions.

Affected configurations

Nvd

Vulners

Node

visserstore_exporter_for_woocommerceRange≤2.7.2wordpress

VendorProductVersionCPE
visserstore_exporter_for_woocommerce*cpe:2.3:a:visser:store_exporter_for_woocommerce:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
visser	store_exporter_for_woocommerce	*	cpe:2.3:a:visser:store_exporter_for_woocommerce::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "woocommerce-exporter",
    "product": "Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More",
    "vendor": "Visser Labs",
    "versions": [
      {
        "changes": [
          {
            "at": "2.7.2.1",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.7.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/woocommerce-exporter/wordpress-store-exporter-for-woocommerce-plugin-2-7-2-cross-site-scripting-xss-vulnerability?_s_id=cve