Lucene search
HistoryMay 08, 2023 - 2:15 p.m.
CVE-2023-0421
cloud manager
wordpress
unauthenticated
xss
exploit
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
47.2%
The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it in an admin panel, allowing unauthenticated attackers to trick a logged in admin to trigger a XSS payload by clicking a link.
Affected configurations
Node
cloud_manager_projectcloud_managerRange≤1.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cloud_manager_project | cloud_manager | * | cpe:2.3:a:cloud_manager_project:cloud_manager:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Cross site scripting
2023-05-08 14:15:00
wpexploit
wpexploit
Cloud Manager <= 1.0 - Reflected XSS
2023-04-12 00:00:00
wpvulndb
wpvulndb
Cloud Manager <= 1.0 - Reflected XSS
2023-04-12 00:00:00
cvelist
cvelist
CVE-2023-0421 Cloud Manager <= 1.0 - Reflected XSS
2023-05-08 13:58:04
cve
cve
CVE-2023-0421
2023-05-08 14:15:11
wordfence
wordfence
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
47.2%
Related for NVD:CVE-2023-0421