Lucene search

Japan Vulnerability NotesJVN:59663854

HistoryNov 08, 2022 - 12:00 a.m.

JVN#59663854: WordPress Plugin "Salon booking system" vulnerable to cross-site scripting

2022-11-0800:00:00

Japan Vulnerability Notes

jvn.jp

wordpress

salon booking system

xss

vulnerability

cross-site scripting

update

cwe-79

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

57.2%

JSON

WordPress Plugin “Salon booking system” contains a cross-site scripting vulnerability (CWE-79).

Impact

An arbitrary script may be executed on the web browser of the user who is logging in to the WordPress administrative page where the product is installed.

Solution

Update the plugin
Update the plugin to the latest version according to the information provided by the developer.

Products Affected

Salon booking system versions prior to 7.9

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

57.2%

JSON

Related for JVN:59663854