CVE-2017-20094

Опубликовано: 24 июн. 2022

Источник: nvd

CVSS3: 3.5

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

A vulnerability, which was classified as problematic, has been found in NewStatPress Plugin 1.2.4. This issue affects some unknown processing. The manipulation leads to basic cross site scripting (Persistent). The attack may be initiated remotely. Upgrading to version 1.2.5 is able to address this issue. It is recommended to upgrade the affected component.

Ссылки

http://seclists.org/fulldisclosure/2017/Feb/81
Exploit
Mailing List
Patch
Third Party Advisory
https://vuldb.com/?id.97373
Third Party Advisory
http://seclists.org/fulldisclosure/2017/Feb/81
Exploit
Mailing List
Patch
Third Party Advisory
https://vuldb.com/?id.97373
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:newstatpress_project:newstatpress:1.2.4:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 43%

0.00206

Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-80

CWE-79

Связанные уязвимости

GHSA-65pg-wc47-9p36

CVSS3: 5.4

github

больше 3 лет назад

EPSS

Процентиль: 43%

0.00206

Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-80

CWE-79