Lucene search
HistoryJan 19, 2023 - 5:15 p.m.
CVE-2022-40697
authentication
stored xss
3com cookies
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
23.3%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in 3com – Asesor de Cookies para normativa española plugin <= 3.4.3 versions.
Affected configurations
Node
3commarketing3com-asesor-de-cookiesRange≤3.4.3wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| 3commarketing | 3com-asesor-de-cookies | * | cpe:2.3:a:3commarketing:3com-asesor-de-cookies:*:*:*:*:*:wordpress:*:* |
Related
wpvulndb
wpvulndb
3com Asesor de Cookies <= 3.4.3 - Admin+ Stored XSS
2022-10-12 00:00:00
prion
prion
Cross site scripting
2023-01-19 17:15:00
cvelist
cvelist
patchstack
patchstack
cve
cve
CVE-2022-40697
2023-01-19 17:15:12
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
23.3%
Related for NVD:CVE-2022-40697