Lucene search
HistoryAug 02, 2017 - 4:29 p.m.
CVE-2017-2284
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6
Confidence
High
EPSS
0.002
Percentile
51.3%
Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
Node
code-atlanticpopup_makerMatch1.0.0wordpress
ORcode-atlanticpopup_makerMatch1.0.1wordpress
ORcode-atlanticpopup_makerMatch1.0.2wordpress
ORcode-atlanticpopup_makerMatch1.0.3wordpress
ORcode-atlanticpopup_makerMatch1.0.4wordpress
ORcode-atlanticpopup_makerMatch1.0.5wordpress
ORcode-atlanticpopup_makerMatch1.1.0wordpress
ORcode-atlanticpopup_makerMatch1.1.1wordpress
ORcode-atlanticpopup_makerMatch1.1.2wordpress
ORcode-atlanticpopup_makerMatch1.1.3wordpress
ORcode-atlanticpopup_makerMatch1.1.4wordpress
ORcode-atlanticpopup_makerMatch1.1.5wordpress
ORcode-atlanticpopup_makerMatch1.1.6wordpress
ORcode-atlanticpopup_makerMatch1.1.7wordpress
ORcode-atlanticpopup_makerMatch1.1.8wordpress
ORcode-atlanticpopup_makerMatch1.1.9wordpress
ORcode-atlanticpopup_makerMatch1.1.10wordpress
ORcode-atlanticpopup_makerMatch1.2.0wordpress
ORcode-atlanticpopup_makerMatch1.2.1wordpress
ORcode-atlanticpopup_makerMatch1.2.2wordpress
ORcode-atlanticpopup_makerMatch1.3.0wordpress
ORcode-atlanticpopup_makerMatch1.3.1wordpress
ORcode-atlanticpopup_makerMatch1.3.2wordpress
ORcode-atlanticpopup_makerMatch1.3.3wordpress
ORcode-atlanticpopup_makerMatch1.3.4wordpress
ORcode-atlanticpopup_makerMatch1.3.5wordpress
ORcode-atlanticpopup_makerMatch1.3.6wordpress
ORcode-atlanticpopup_makerMatch1.3.7wordpress
ORcode-atlanticpopup_makerMatch1.3.8wordpress
ORcode-atlanticpopup_makerMatch1.3.9wordpress
ORcode-atlanticpopup_makerMatch1.4.0wordpress
ORcode-atlanticpopup_makerMatch1.4.1wordpress
ORcode-atlanticpopup_makerMatch1.4.2wordpress
ORcode-atlanticpopup_makerMatch1.4.3wordpress
ORcode-atlanticpopup_makerMatch1.4.4wordpress
ORcode-atlanticpopup_makerMatch1.4.5wordpress
ORcode-atlanticpopup_makerMatch1.4.6wordpress
ORcode-atlanticpopup_makerMatch1.4.7wordpress
ORcode-atlanticpopup_makerMatch1.4.8wordpress
ORcode-atlanticpopup_makerMatch1.4.9wordpress
ORcode-atlanticpopup_makerMatch1.4.10wordpress
ORcode-atlanticpopup_makerMatch1.4.11wordpress
ORcode-atlanticpopup_makerMatch1.4.12wordpress
ORcode-atlanticpopup_makerMatch1.4.13wordpress
ORcode-atlanticpopup_makerMatch1.4.14wordpress
ORcode-atlanticpopup_makerMatch1.4.15wordpress
ORcode-atlanticpopup_makerMatch1.4.16wordpress
ORcode-atlanticpopup_makerMatch1.4.17wordpress
ORcode-atlanticpopup_makerMatch1.4.18wordpress
ORcode-atlanticpopup_makerMatch1.4.19wordpress
ORcode-atlanticpopup_makerMatch1.4.20wordpress
ORcode-atlanticpopup_makerMatch1.4.21wordpress
ORcode-atlanticpopup_makerMatch1.5.0wordpress
ORcode-atlanticpopup_makerMatch1.5.1wordpress
ORcode-atlanticpopup_makerMatch1.5.2wordpress
ORcode-atlanticpopup_makerMatch1.5.3wordpress
ORcode-atlanticpopup_makerMatch1.5.4wordpress
ORcode-atlanticpopup_makerMatch1.5.5wordpress
ORcode-atlanticpopup_makerMatch1.5.6wordpress
ORcode-atlanticpopup_makerMatch1.5.7wordpress
ORcode-atlanticpopup_makerMatch1.5.8wordpress
ORcode-atlanticpopup_makerMatch1.6.0wordpress
ORcode-atlanticpopup_makerMatch1.6.1wordpress
ORcode-atlanticpopup_makerMatch1.6.2wordpress
ORcode-atlanticpopup_makerMatch1.6.3wordpress
ORcode-atlanticpopup_makerMatch1.6.4wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| code-atlantic | popup_maker | 1.0.0 | cpe:2.3:a:code-atlantic:popup_maker:1.0.0:*:*:*:*:wordpress:*:* |
| code-atlantic | popup_maker | 1.0.1 | cpe:2.3:a:code-atlantic:popup_maker:1.0.1:*:*:*:*:wordpress:*:* |
| code-atlantic | popup_maker | 1.0.2 | cpe:2.3:a:code-atlantic:popup_maker:1.0.2:*:*:*:*:wordpress:*:* |
| code-atlantic | popup_maker | 1.0.3 | cpe:2.3:a:code-atlantic:popup_maker:1.0.3:*:*:*:*:wordpress:*:* |
| code-atlantic | popup_maker | 1.0.4 | cpe:2.3:a:code-atlantic:popup_maker:1.0.4:*:*:*:*:wordpress:*:* |
| code-atlantic | popup_maker | 1.0.5 | cpe:2.3:a:code-atlantic:popup_maker:1.0.5:*:*:*:*:wordpress:*:* |
| code-atlantic | popup_maker | 1.1.0 | cpe:2.3:a:code-atlantic:popup_maker:1.1.0:*:*:*:*:wordpress:*:* |
| code-atlantic | popup_maker | 1.1.1 | cpe:2.3:a:code-atlantic:popup_maker:1.1.1:*:*:*:*:wordpress:*:* |
| code-atlantic | popup_maker | 1.1.2 | cpe:2.3:a:code-atlantic:popup_maker:1.1.2:*:*:*:*:wordpress:*:* |
| code-atlantic | popup_maker | 1.1.3 | cpe:2.3:a:code-atlantic:popup_maker:1.1.3:*:*:*:*:wordpress:*:* |
Related
patchstack
patchstack
cvelist
cvelist
CVE-2017-2284
2017-08-02 16:00:00
wpvulndb
wpvulndb
Popup Maker <= 1.6.4 - Authenticated Cross-Site Scripting (XSS)
2017-07-24 00:00:00
jvn
jvn
cve
cve
CVE-2017-2284
2017-08-02 16:29:00
prion
prion
Cross site scripting
2017-08-02 16:29:00
osv
osv
CVE-2017-2284
2017-08-02 16:29:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6
Confidence
High
EPSS
0.002
Percentile
51.3%
Related for NVD:CVE-2017-2284