CVE-2022-3853

{"id": "CVE-2022-3853", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2022-12-12T18:15:10.907", "references": [{"url": "https://wpscan.com/vulnerability/c2bc7d23-5bfd-481c-b42b-da7ee80d9514", "tags": ["Third Party Advisory"], "source": "contact@wpscan.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Cross-site Scripting (XSS) is a client-side code injection attack. The attacker aims to execute malicious scripts in a web browser of the victim by including malicious code in a legitimate web page or web application."}, {"lang": "es", "value": "Cross-site Scripting (XSS) es un ataque de inyecci\u00f3n de c\u00f3digo del lado del cliente. El atacante tiene como objetivo ejecutar scripts maliciosos en un navegador web de la v\u00edctima incluyendo c\u00f3digo malicioso en una p\u00e1gina web o aplicaci\u00f3n web leg\u00edtima."}], "lastModified": "2023-11-07T03:51:53.350", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:supra-csv-parser_project:supra-csv-parser:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "D4623FBC-8C80-47F5-8E03-765BFEC02846", "versionEndIncluding": "4.0.3"}], "operator": "OR"}]}], "sourceIdentifier": "contact@wpscan.com"}