Lucene search

K
osvGoogleOSV:BIT-WORDPRESS-MULTISITE-2022-43497
HistoryMar 06, 2024 - 11:09 a.m.

BIT-wordpress-multisite-2022-43497

2024-03-0611:09:30
Google
osv.dev
4
wordpress
cross-site scripting
vulnerability
remote attacker
arbitrary script
patched releases

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

57.2%

Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7.

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

57.2%

Related for OSV:BIT-WORDPRESS-MULTISITE-2022-43497