CVE-2016-10920

{"id": "CVE-2016-10920", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "published": "2019-08-22T13:15:11.950", "references": [{"url": "https://wordpress.org/plugins/gnucommerce/#developers", "tags": ["Release Notes", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://wordpress.org/plugins/gnucommerce/#developers", "tags": ["Release Notes", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS."}, {"lang": "es", "value": "El plugin gnucommerce versiones anteriores a 0.5.7-BETA para WordPress, presenta una vulnerabilidad de tipo XSS."}], "lastModified": "2024-11-21T02:45:04.617", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sir:gnucommerce:0.1:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69CDAB57-5B59-41AA-9C58-EA76995BBD54"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.1.4:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "032B35A8-BC5A-46CD-AA1E-CEE22410E1E7"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.1:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E189BC25-974D-4CA1-828D-428011539A7E"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.2:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED12379B-A13F-41A3-A821-27CEF541EA63"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.3:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CEBE4B6F-9E7F-4313-BEBB-B55867E94578"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.4:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9A492FB-F4D3-4C81-984A-365FFC47CF3F"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.5:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72E4D711-B243-4DC3-A643-FBFFB481D281"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.7:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB9A5830-D89F-443B-B951-F59A436F5927"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.8:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "655146D8-8A1A-4F6F-A516-91F4F3153EFF"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.9:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A309F706-7711-4188-9AE6-BA5A07B6616A"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.0:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F057645-1CEE-4F26-80E1-8D450F8CB911"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.1:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34DDD493-98B0-4DFE-B4D0-F23840C85626"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.2:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79A00050-8011-41C7-B1B1-6E15DFB977A7"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.3:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3659C65-6373-4A77-B141-5C154F3A343F"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.4:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C0793FB-A234-4FB4-B557-CD821DE86019"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.6:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACAE00C5-C994-464F-AA4B-9E8D88C79236"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.7:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC0CC445-C100-40B6-9A8A-12D23BC566A3"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.8:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBE8EC9B-D6F1-4510-AFAF-89205A3AB08F"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.0:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "291DADD8-2D26-4723-B2FB-BF501DD75D74"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.1:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F31065C8-356B-4ABA-9D9B-B243D15DAEB3"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.2:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DD0AA5B-B83B-4A32-A9C5-7C80FA0770E6"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.3:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1934C7B0-8A9C-4934-8494-228CE57CEC26"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.5:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD9DEE33-8327-46E7-A355-352148428092"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.6:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74675FC9-C1A7-400B-A9B6-8600ED662625"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.0:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F592C6B-F987-45EB-A5C9-6D15DE048529"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.1:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA25AC75-6638-4C2C-A559-ECEA80000FC1"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.2:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D478CF23-F4D6-4793-BB3B-D485E7088E8F"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.4:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF5198DB-1BDD-4CF9-90F7-FEFB2D76F77D"}, {"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.5:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB57D462-3989-4051-A048-67BDA94EF91A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}