CVE-2023-47697

Опубликовано: 13 нояб. 2023

Источник: nvd

CVSS3: 7.1

CVSS3: 6.1

EPSS Низкий

Описание

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin <= 3.1.39 versions.

Ссылки

https://patchstack.com/database/vulnerability/wp-event-manager/wordpress-wp-event-manager-plugin-3-1-39-cross-site-scripting-xss-vulnerability?_s_id=cve
Third Party Advisory
https://patchstack.com/database/vulnerability/wp-event-manager/wordpress-wp-event-manager-plugin-3-1-39-cross-site-scripting-xss-vulnerability?_s_id=cve
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wp-eventmanager:wp_event_manager:*:*:*:*:*:wordpress:*:*

Версия до 3.1.39 (включая)

EPSS

Процентиль: 27%

0.00096

Низкий

7.1 High

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-w69h-jwj5-jm7c

CVSS3: 7.1

github

около 2 лет назад

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin <= 3.1.39 versions.

EPSS

Процентиль: 27%

0.00096

Низкий

7.1 High

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79