Lucene search
HistoryJul 22, 2024 - 10:15 a.m.
CVE-2024-37216
cve-2024-37216
xss
rami yushuvaev sketchfab embed
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.5%
Improper Neutralization of Input During Web Page Generation (XSS or ‘Cross-site Scripting’) vulnerability in Rami Yushuvaev Sketchfab Embed allows Stored XSS.This issue affects Sketchfab Embed: from n/a through 1.5.
Affected configurations
Node
generatewpsketchfab_embedRange≤1.5wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| generatewp | sketchfab_embed | * | cpe:2.3:a:generatewp:sketchfab_embed:*:*:*:*:*:wordpress:*:* |
Related
cve
cve
CVE-2024-37216
2024-07-22 10:15:06
cvelist
cvelist
vulnrichment
vulnrichment
wordfence
wordfence
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.5%
Related for NVD:CVE-2024-37216