2 lines
2.4 KiB
JSON
2 lines
2.4 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"WOOEXIM","vendor":"Unknown","versions":[{"lessThanOrEqual":"5.0.0","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:bulktheme:wooexim:*:*:*:*:*:wordpress:*:*","matchCriteriaId":"1D2AE8EF-80B3-49B3-9142-2AB0B0FC2406","versionEndIncluding":"5.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack."},{"lang":"es","value":"El complemento WOOEXIM para WordPress hasta la versión 5.0.0 no tiene verificación CSRF en algunos lugares y carece de depuración y escape, lo que podría permitir a los atacantes hacer que un usuario no autenticado sea vulnerable a XSS reflejado a través de un ataque CSRF."}],"id":"CVE-2025-1288","lastModified":"2026-06-17T08:38:44.900","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-1288","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-05-20T18:34:40.403755Z","version":"2.0.3"}}]},"published":"2025-05-15T20:16:02.227","references":[{"source":"contact@wpscan.com","tags":["Exploit","Third Party Advisory"],"url":"https://wpscan.com/vulnerability/175af35d-6972-42c9-b7ac-913ce1fbac64/"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"],"url":"https://wpscan.com/vulnerability/175af35d-6972-42c9-b7ac-913ce1fbac64/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-352"}],"source":"nvd@nist.gov","type":"Primary"}]}
|