exploitDog

CVE-2023-49181

Опубликовано: 15 дек. 2023

Источник: nvd

CVSS3: 5.9

CVSS3: 5.4

EPSS Низкий

Описание

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce allows Stored XSS.This issue affects WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce: from n/a through 3.1.40.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wp-eventmanager:wp_event_manager:*:*:*:*:*:wordpress:*:*

Версия до 3.1.40 (включая)

EPSS

Процентиль: 32%

0.00118

Низкий

5.9 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-xxx9-8q88-3qrf

CVSS3: 5.9

github

больше 1 года назад

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce allows Stored XSS.This issue affects WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce: from n/a through 3.1.40.

EPSS

Процентиль: 32%

0.00118

Низкий

5.9 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79