2 lines
2.4 KiB
JSON
2 lines
2.4 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"Short URL","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.6.8","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:kaizencoders:short_url:*:*:*:*:*:wordpress:*:*","matchCriteriaId":"0884698E-F4C6-4877-9B0C-021DB7C8A624","versionEndExcluding":"1.6.8","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to a SQL injection exploitable by users with relatively low privilege on the site, like subscribers."},{"lang":"es","value":"El complemento Short URL de WordPress hasta la versión 1.6.8 no depura ni escapa adecuadamente un parámetro antes de usarlo en una declaración SQL, lo que genera una inyección SQL explotable por usuarios con privilegios relativamente bajos en el sitio, como los suscriptores."}],"id":"CVE-2023-2921","lastModified":"2026-06-17T05:53:47.370","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-2921","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-06-09T19:45:18.628901Z","version":"2.0.3"}}]},"published":"2025-06-06T06:15:30.597","references":[{"source":"contact@wpscan.com","tags":["Exploit","Third Party Advisory"],"url":"https://wpscan.com/vulnerability/0f85db4f-8493-4941-8f3c-e5258c581bdc/"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"],"url":"https://wpscan.com/vulnerability/0f85db4f-8493-4941-8f3c-e5258c581bdc/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"nvd@nist.gov","type":"Primary"}]}
|