Lucene search

K
nvd[email protected]NVD:CVE-2024-37551
HistoryJul 21, 2024 - 7:15 a.m.

CVE-2024-37551

2024-07-2107:15:04
CWE-79
web.nvd.nist.gov
4
cve-2024-37551
web page generation
xss
cross-site scripting
perials simple social share

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

14.7%

Improper Neutralization of Input During Web Page Generation (XSS or ‘Cross-site Scripting’) vulnerability in Perials Simple Social Share allows Stored XSS.This issue affects Simple Social Share: from n/a through 3.0.

Affected configurations

Nvd
Node
perialssimple_social_shareRange3.0wordpress
VendorProductVersionCPE
perialssimple_social_share*cpe:2.3:a:perials:simple_social_share:*:*:*:*:*:wordpress:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0

Percentile

14.7%

Related for NVD:CVE-2024-37551