2 lines
7.4 KiB
JSON
2 lines
7.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"Simple Custom CSS and JS","vendor":"SilkyPress","versions":[{"status":"affected","version":"prior to version 3.4"}]}],"source":"vultures@jpcert.or.jp"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:1.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"FE6A3F4D-31DF-4195-8EDB-B003B4453CD8","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:1.1:*:*:*:*:wordpress:*:*","matchCriteriaId":"1D2E36D5-23D0-440B-9678-340A0B89E8CC","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:1.2:*:*:*:*:wordpress:*:*","matchCriteriaId":"062EAD3E-AB27-4713-8A22-34986A00DEF4","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:1.3:*:*:*:*:wordpress:*:*","matchCriteriaId":"BC13DEB7-CD88-4C66-BAD8-D8A3E8BD9221","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:1.4:*:*:*:*:wordpress:*:*","matchCriteriaId":"D28C6D31-1010-401D-AC77-3BF214A495C1","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:1.5:*:*:*:*:wordpress:*:*","matchCriteriaId":"D4C97E9D-2860-475A-A16D-C7C799DBCE58","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:1.6:*:*:*:*:wordpress:*:*","matchCriteriaId":"4D4F1A9F-6BE4-4780-BF62-38B97FC7FFAE","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"5E72E4A6-84C3-4ED6-8868-4C09FBD5C8AF","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.1:*:*:*:*:wordpress:*:*","matchCriteriaId":"C7FAD033-62A7-4503-A071-98FE474E6EDA","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.2:*:*:*:*:wordpress:*:*","matchCriteriaId":"582DE8B3-F102-40F7-B03C-816C637E4F04","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.3:*:*:*:*:wordpress:*:*","matchCriteriaId":"39ED4178-ACBA-4C55-A975-23154290503E","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.4:*:*:*:*:wordpress:*:*","matchCriteriaId":"695B68E2-20C5-4E41-B188-3A2A8B9E00A2","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.5:*:*:*:*:wordpress:*:*","matchCriteriaId":"A44CC8F6-459C-433E-9F54-5155DE19AE07","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.6:*:*:*:*:wordpress:*:*","matchCriteriaId":"20BE7CA8-B712-4E7F-92EC-D3F25FC7EF32","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.7:*:*:*:*:wordpress:*:*","matchCriteriaId":"D15BDD75-E1E2-4561-B6A3-B63DB15B570D","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.8:*:*:*:*:wordpress:*:*","matchCriteriaId":"C201CD20-035C-4A4C-973B-9905CDE352E4","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.9:*:*:*:*:wordpress:*:*","matchCriteriaId":"64131CE2-CA15-4AC9-88D7-BFBE8A976042","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.10:*:*:*:*:wordpress:*:*","matchCriteriaId":"C699E9A8-5BB8-4B1E-BC37-EE08FF79FFC7","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:3.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"3144C8A4-5D55-41C9-8429-1B9259966642","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:3.1:*:*:*:*:wordpress:*:*","matchCriteriaId":"54148D7E-6CD2-41AC-AA73-32328F4FCB14","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:3.2:*:*:*:*:wordpress:*:*","matchCriteriaId":"5B2BE06F-B93D-4BC1-A372-C8A8F2396C5B","vulnerable":true},{"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:3.3:*:*:*:*:wordpress:*:*","matchCriteriaId":"DECB5657-FE13-4D4E-A447-6A4BA3D7511B","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Simple Custom CSS and JS en versiones anteriores a la 3.4 permite a los atacantes que inyecten scripts web o HTML arbitrarios mediante vectores no especificados."}],"id":"CVE-2017-2285","lastModified":"2026-06-17T01:15:53.250","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":4.3,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2017-2285","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-04-23T13:22:25.643999Z","version":"2.0.3"}}]},"published":"2017-08-02T16:29:00.567","references":[{"source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"],"url":"https://jvn.jp/en/jp/JVN31459091/index.html"},{"source":"vultures@jpcert.or.jp","tags":["Patch","Third Party Advisory"],"url":"https://plugins.trac.wordpress.org/changeset/1695440/#file6"},{"source":"vultures@jpcert.or.jp","tags":["Product","Third Party Advisory"],"url":"https://wordpress.org/plugins/custom-css-js/#developers"},{"source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"],"url":"https://wpvulndb.com/vulnerabilities/8879"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"https://jvn.jp/en/jp/JVN31459091/index.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://plugins.trac.wordpress.org/changeset/1695440/#file6"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product","Third Party Advisory"],"url":"https://wordpress.org/plugins/custom-css-js/#developers"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"https://wpvulndb.com/vulnerabilities/8879"}],"sourceIdentifier":"vultures@jpcert.or.jp","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"nvd@nist.gov","type":"Primary"},{"description":[{"lang":"en","value":"CWE-79"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|