mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-07-09 16:05:11 +00:00
56 lines
1.7 KiB
JSON
56 lines
1.7 KiB
JSON
![]() |
{
|
||
|
"id": "CVE-2024-51807",
|
||
|
"sourceIdentifier": "audit@patchstack.com",
|
||
|
"published": "2024-11-19T17:15:26.610",
|
||
|
"lastModified": "2024-11-19T17:15:26.610",
|
||
|
"vulnStatus": "Received",
|
||
|
"cveTags": [],
|
||
|
"descriptions": [
|
||
|
{
|
||
|
"lang": "en",
|
||
|
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Black and White Digital Ltd AgendaPress \u2013 Easily Publish Meeting Agendas and Programs on WordPress allows Stored XSS.This issue affects AgendaPress \u2013 Easily Publish Meeting Agendas and Programs on WordPress: from n/a through 1.0.8."
|
||
|
}
|
||
|
],
|
||
|
"metrics": {
|
||
|
"cvssMetricV31": [
|
||
|
{
|
||
|
"source": "audit@patchstack.com",
|
||
|
"type": "Secondary",
|
||
|
"cvssData": {
|
||
|
"version": "3.1",
|
||
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
|
||
|
"attackVector": "NETWORK",
|
||
|
"attackComplexity": "LOW",
|
||
|
"privilegesRequired": "LOW",
|
||
|
"userInteraction": "REQUIRED",
|
||
|
"scope": "CHANGED",
|
||
|
"confidentialityImpact": "LOW",
|
||
|
"integrityImpact": "LOW",
|
||
|
"availabilityImpact": "LOW",
|
||
|
"baseScore": 6.5,
|
||
|
"baseSeverity": "MEDIUM"
|
||
|
},
|
||
|
"exploitabilityScore": 2.3,
|
||
|
"impactScore": 3.7
|
||
|
}
|
||
|
]
|
||
|
},
|
||
|
"weaknesses": [
|
||
|
{
|
||
|
"source": "audit@patchstack.com",
|
||
|
"type": "Primary",
|
||
|
"description": [
|
||
|
{
|
||
|
"lang": "en",
|
||
|
"value": "CWE-79"
|
||
|
}
|
||
|
]
|
||
|
}
|
||
|
],
|
||
|
"references": [
|
||
|
{
|
||
|
"url": "https://patchstack.com/database/vulnerability/agendapress/wordpress-agendapress-plugin-1-0-8-stored-cross-site-scripting-xss-vulnerability?_s_id=cve",
|
||
|
"source": "audit@patchstack.com"
|
||
|
}
|
||
|
]
|
||
|
}
|