CVE-2016-10920
Estado: ModificadaMedia (6.1)—
The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Puntuación base: 6.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.92%
- Percentil entre todas las CVEs puntuadas: 59
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-79
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2016-10920",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.0",
"baseScore": 6.1,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 2.7,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2019-08-22T13:15:11.950",
"references": [
{
"url": "https://wordpress.org/plugins/gnucommerce/#developers",
"tags": [
"Release Notes",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://wordpress.org/plugins/gnucommerce/#developers",
"tags": [
"Release Notes",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS."
},
{
"lang": "es",
"value": "El plugin gnucommerce versiones anteriores a 0.5.7-BETA para WordPress, presenta una vulnerabilidad de tipo XSS."
}
],
"lastModified": "2026-06-17T00:40:37.507",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.1:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69CDAB57-5B59-41AA-9C58-EA76995BBD54"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.1.4:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "032B35A8-BC5A-46CD-AA1E-CEE22410E1E7"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.1:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E189BC25-974D-4CA1-828D-428011539A7E"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.2:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED12379B-A13F-41A3-A821-27CEF541EA63"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.3:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CEBE4B6F-9E7F-4313-BEBB-B55867E94578"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.4:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9A492FB-F4D3-4C81-984A-365FFC47CF3F"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.5:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72E4D711-B243-4DC3-A643-FBFFB481D281"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.7:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB9A5830-D89F-443B-B951-F59A436F5927"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.8:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "655146D8-8A1A-4F6F-A516-91F4F3153EFF"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.2.9:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A309F706-7711-4188-9AE6-BA5A07B6616A"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.0:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F057645-1CEE-4F26-80E1-8D450F8CB911"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.1:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34DDD493-98B0-4DFE-B4D0-F23840C85626"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.2:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79A00050-8011-41C7-B1B1-6E15DFB977A7"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.3:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3659C65-6373-4A77-B141-5C154F3A343F"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.4:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C0793FB-A234-4FB4-B557-CD821DE86019"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.6:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACAE00C5-C994-464F-AA4B-9E8D88C79236"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.7:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC0CC445-C100-40B6-9A8A-12D23BC566A3"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.3.8:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBE8EC9B-D6F1-4510-AFAF-89205A3AB08F"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.0:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "291DADD8-2D26-4723-B2FB-BF501DD75D74"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.1:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F31065C8-356B-4ABA-9D9B-B243D15DAEB3"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.2:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DD0AA5B-B83B-4A32-A9C5-7C80FA0770E6"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.3:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1934C7B0-8A9C-4934-8494-228CE57CEC26"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.5:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD9DEE33-8327-46E7-A355-352148428092"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.4.6:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74675FC9-C1A7-400B-A9B6-8600ED662625"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.0:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F592C6B-F987-45EB-A5C9-6D15DE048529"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.1:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA25AC75-6638-4C2C-A559-ECEA80000FC1"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.2:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D478CF23-F4D6-4793-BB3B-D485E7088E8F"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.4:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF5198DB-1BDD-4CF9-90F7-FEFB2D76F77D"
},
{
"criteria": "cpe:2.3:a:sir:gnucommerce:0.5.5:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB57D462-3989-4051-A048-67BDA94EF91A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}