Lucene search

K
nvd[email protected]NVD:CVE-2023-47245
HistoryNov 16, 2023 - 7:15 p.m.

CVE-2023-47245

2023-11-1619:15:08
CWE-79
web.nvd.nist.gov
2
cve-2023-47245
auth
admin
cross-site scripting
vulnerability
marco milesi
anac xml viewer
plugin

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

14.0%

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Viewer plugin <= 1.7 versions.

Affected configurations

Nvd
Node
marcomilesianac_xml_viewerRange1.7wordpress
VendorProductVersionCPE
marcomilesianac_xml_viewer*cpe:2.3:a:marcomilesi:anac_xml_viewer:*:*:*:*:*:wordpress:*:*

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

14.0%

Related for NVD:CVE-2023-47245