CVE-2021-36919

Опубликовано: 26 нояб. 2021

Источник: nvd

CVSS3: 6.1

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities in WordPress Awesome Support plugin (versions <= 6.0.6), vulnerable parameters (&id, &assignee).

Ссылки

https://patchstack.com/database/vulnerability/awesome-support/wordpress-awesome-support-plugin-6-0-6-multiple-authenticated-reflected-cross-site-scripting-xss-vulnerabilities
Third Party Advisory
https://wordpress.org/plugins/awesome-support/#developers
Product
https://patchstack.com/database/vulnerability/awesome-support/wordpress-awesome-support-plugin-6-0-6-multiple-authenticated-reflected-cross-site-scripting-xss-vulnerabilities
Third Party Advisory
https://wordpress.org/plugins/awesome-support/#developers
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:getawesomesupport:awesome_support:*:*:*:*:*:wordpress:*:*

Версия до 6.0.6 (включая)

EPSS

Процентиль: 37%

0.00162

Низкий

6.1 Medium

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-wmx3-62wg-53jp

github

около 4 лет назад

Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities in WordPress Awesome Support plugin (versions <= 6.0.6), vulnerable parameters (&id, &assignee).

EPSS

Процентиль: 37%

0.00162

Низкий

6.1 Medium

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79