2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2017-2285" ,
"sourceIdentifier" : "vultures@jpcert.or.jp" ,
"published" : "2017-08-02T16:29:00.567" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T03:23:12.677" ,
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Cross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
} ,
{
"lang" : "es" ,
"value" : "Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Simple Custom CSS and JS en versiones anteriores a la 3.4 permite a los atacantes que inyecten scripts web o HTML arbitrarios mediante vectores no especificados."
}
] ,
"metrics" : {
"cvssMetricV30" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.0" ,
"vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 6.1 ,
"baseSeverity" : "MEDIUM" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "CHANGED" ,
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "LOW" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 2.7
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 4.3 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "PARTIAL" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.6 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : true
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-79"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:1.0:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "FE6A3F4D-31DF-4195-8EDB-B003B4453CD8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:1.1:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "1D2E36D5-23D0-440B-9678-340A0B89E8CC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:1.2:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "062EAD3E-AB27-4713-8A22-34986A00DEF4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:1.3:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "BC13DEB7-CD88-4C66-BAD8-D8A3E8BD9221"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:1.4:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "D28C6D31-1010-401D-AC77-3BF214A495C1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:1.5:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "D4C97E9D-2860-475A-A16D-C7C799DBCE58"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:1.6:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "4D4F1A9F-6BE4-4780-BF62-38B97FC7FFAE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.0:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "5E72E4A6-84C3-4ED6-8868-4C09FBD5C8AF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.1:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "C7FAD033-62A7-4503-A071-98FE474E6EDA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.2:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "582DE8B3-F102-40F7-B03C-816C637E4F04"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.3:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "39ED4178-ACBA-4C55-A975-23154290503E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.4:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "695B68E2-20C5-4E41-B188-3A2A8B9E00A2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.5:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "A44CC8F6-459C-433E-9F54-5155DE19AE07"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.6:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "20BE7CA8-B712-4E7F-92EC-D3F25FC7EF32"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.7:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "D15BDD75-E1E2-4561-B6A3-B63DB15B570D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.8:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "C201CD20-035C-4A4C-973B-9905CDE352E4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.9:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "64131CE2-CA15-4AC9-88D7-BFBE8A976042"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:2.10:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "C699E9A8-5BB8-4B1E-BC37-EE08FF79FFC7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:3.0:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "3144C8A4-5D55-41C9-8429-1B9259966642"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:3.1:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "54148D7E-6CD2-41AC-AA73-32328F4FCB14"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:3.2:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "5B2BE06F-B93D-4BC1-A372-C8A8F2396C5B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:silkypress:simple_custom_css_and_js:3.3:*:*:*:*:wordpress:*:*" ,
"matchCriteriaId" : "DECB5657-FE13-4D4E-A447-6A4BA3D7511B"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://jvn.jp/en/jp/JVN31459091/index.html" ,
"source" : "vultures@jpcert.or.jp" ,
"tags" : [
"Third Party Advisory" ,
"VDB Entry"
]
} ,
{
"url" : "https://plugins.trac.wordpress.org/changeset/1695440/#file6" ,
"source" : "vultures@jpcert.or.jp" ,
"tags" : [
"Patch" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://wordpress.org/plugins/custom-css-js/#developers" ,
"source" : "vultures@jpcert.or.jp" ,
"tags" : [
"Product" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://wpvulndb.com/vulnerabilities/8879" ,
"source" : "vultures@jpcert.or.jp" ,
"tags" : [
"Third Party Advisory" ,
"VDB Entry"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://jvn.jp/en/jp/JVN31459091/index.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Third Party Advisory" ,
"VDB Entry"
]
} ,
{
"url" : "https://plugins.trac.wordpress.org/changeset/1695440/#file6" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://wordpress.org/plugins/custom-css-js/#developers" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Product" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://wpvulndb.com/vulnerabilities/8879" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Third Party Advisory" ,
"VDB Entry"
]
2023-04-24 12:24:31 +02:00
}
]
}