CVE-2014-6313
Published Oct 14, 2014
Last updated 10 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the range parameter on the wc-reports page to wp-admin/admin.php.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:*:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "739B9FFC-4B07-445F-AB8D-C9E3BB4C434A",
"versionEndIncluding": "2.2.2"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.1.0:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "ABE84D29-8BDD-4F4F-AF37-33D060052D41"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.1.1:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "C7335A76-BC25-4452-A7BC-537C0A603937"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.1.2:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "6BA11FD5-FFFA-4969-AE33-41B4A3E81C46"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.1.3:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "C024CC02-7BB0-46C9-B529-E3149C78DF03"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.1.4:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "099211C2-1DFC-4652-BCE1-BD1895C9B275"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.1.5:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "F5D125C6-0122-4B55-8DDE-F185B328668A"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.1.6:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "8FC9EF9B-603B-423C-8C4D-16DB8BBD9466"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.1.7:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "32171249-23CA-4414-BD41-55CE0A23C4FC"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.1.8:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "7075AD0D-7731-456F-B30C-D26364E62648"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.1.9:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "A0A8CDAD-52BD-4B2C-B928-14A605EE1737"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.1.10:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "F068000A-0E91-4EE1-AF32-26776E7F42A8"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.1.11:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "339F8827-F39D-479C-A804-CED959B811A9"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.1.12:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "FFA63F9E-C685-4295-9307-6C3F5E08E08F"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.2.0:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "D0BA04AE-5FA4-445A-AE3E-95BB4D24AD63"
},
{
"criteria": "cpe:2.3:a:woothemes:woocommerce_plugin:2.2.1:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "FAF53781-BBD6-4B08-92B7-CA8E92E43756"
}
],
"operator": "OR"
}
]
}
]