Lucene search

PatchstackCVE-2023-47223

HistoryNov 08, 2023 - 7:15 p.m.

CVE-2023-47223

2023-11-0819:15:08

CWE-79

Patchstack

web.nvd.nist.gov

cve-2023-47223

auth

admin

stored

cross-site scripting

xss

vulnerability

wp map plugins

basic interactive world map

nvd

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

AI Score

4.9

Confidence

High

EPSS

Percentile

14.0%

JSON

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Map Plugins Basic Interactive World Map plugin <= 2.0 versions.

Affected configurations

Nvd

Vulners

Node

wpmappluginsbasic_interactive_world_mapRange≤2.0wordpress

VendorProductVersionCPE
wpmappluginsbasic_interactive_world_map*cpe:2.3:a:wpmapplugins:basic_interactive_world_map:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
wpmapplugins	basic_interactive_world_map	*	cpe:2.3:a:wpmapplugins:basic_interactive_world_map::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "basic-interactive-world-map",
    "product": "Basic Interactive World Map",
    "vendor": "WP Map Plugins",
    "versions": [
      {
        "changes": [
          {
            "at": "2.7",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/basic-interactive-world-map/wordpress-basic-interactive-world-map-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve