Lucene search

K
nvd[email protected]NVD:CVE-2023-30778
HistoryAug 15, 2023 - 1:15 p.m.

CVE-2023-30778

2023-08-1513:15:09
CWE-79
web.nvd.nist.gov
2
cve-2023-30778
authorization
stored
cross-site scripting
blubrry powerpress podcasting plugin
blubrry plugin
version 10.0.1

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

21.7%

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry plugin <= 10.0.1 versions.

Affected configurations

Nvd
Node
blubrrypowerpressRange10.0.1wordpress
VendorProductVersionCPE
blubrrypowerpress*cpe:2.3:a:blubrry:powerpress:*:*:*:*:*:wordpress:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

21.7%

Related for NVD:CVE-2023-30778