CVE-2022-3853

Cross-site Scripting (XSS) is a client-side code injection attack. The attacker aims to execute malicious scripts in a web browser of the victim by including malicious code in a legitimate web page or web application.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://wpscan.com/vulnerability/c2bc7d23-5bfd-481c-b42b-da7ee80d9514	Third Party Advisory
https://wpscan.com/vulnerability/c2bc7d23-5bfd-481c-b42b-da7ee80d9514	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:supra-csv-parser_project:supra-csv-parser:*:*:*:*:*:wordpress:*:*

History

No history.

Information

Published : 2022-12-12 18:15

Updated : 2025-04-22 15:16

NVD link : CVE-2022-3853

Mitre link : CVE-2022-3853

CVE.ORG link : CVE-2022-3853

JSON object : View

Products Affected

supra-csv-parser_project

supra-csv-parser

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

{"id": "CVE-2022-3853", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2022-12-12T18:15:10.907", "references": [{"url": "https://wpscan.com/vulnerability/c2bc7d23-5bfd-481c-b42b-da7ee80d9514", "tags": ["Third Party Advisory"], "source": "contact@wpscan.com"}, {"url": "https://wpscan.com/vulnerability/c2bc7d23-5bfd-481c-b42b-da7ee80d9514", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Cross-site Scripting (XSS) is a client-side code injection attack. The attacker aims to execute malicious scripts in a web browser of the victim by including malicious code in a legitimate web page or web application."}, {"lang": "es", "value": "Cross-site Scripting (XSS) es un ataque de inyecci\u00f3n de c\u00f3digo del lado del cliente. El atacante tiene como objetivo ejecutar scripts maliciosos en un navegador web de la v\u00edctima incluyendo c\u00f3digo malicioso en una p\u00e1gina web o aplicaci\u00f3n web leg\u00edtima."}], "lastModified": "2025-04-22T15:16:00.377", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:supra-csv-parser_project:supra-csv-parser:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "D4623FBC-8C80-47F5-8E03-765BFEC02846", "versionEndIncluding": "4.0.3"}], "operator": "OR"}]}], "sourceIdentifier": "contact@wpscan.com"}