Lucene search

[email protected]NVD:CVE-2023-33329

HistoryJul 18, 2023 - 6:15 p.m.

CVE-2023-33329

2023-07-1818:15:11

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-33329

admin+

cross-site scripting

hijiri custom post type generator

version 2.4.2

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

16.3%

JSON

Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Hijiri Custom Post Type Generator plugin <= 2.4.2 versions.

Affected configurations

NVD

Node

custom_post_type_generator_projectcustom_post_type_generatorRange≤2.4.2wordpress

References

patchstack.com/database/vulnerability/custom-post-type-generator/wordpress-custom-post-type-generator-plugin-2-4-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve