Lucene search
HistoryDec 04, 2022 - 11:15 p.m.
CVE-2022-40968
cross-site scripting
amazon affiliates store
wordpress
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
31.5%
Reflected Cross-Site Scripting (XSS) vulnerability in 2kb Amazon Affiliates Store plugin <=2.1.5 on WordPress.
Affected configurations
Node
2kblater2kb_amazon_affiliates_storeRange≤2.1.5wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| 2kblater | 2kb_amazon_affiliates_store | * | cpe:2.3:a:2kblater:2kb_amazon_affiliates_store:*:*:*:*:*:wordpress:*:* |
Related
wpvulndb
wpvulndb
2kb Amazon Affiliates Store <= 2.1.5 - Reflected XSS
2022-10-24 00:00:00
patchstack
patchstack
cvelist
cvelist
prion
prion
Cross site scripting
2022-12-04 23:15:00
cve
cve
CVE-2022-40968
2022-12-04 23:15:09
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
31.5%
Related for NVD:CVE-2022-40968