{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-01T09:52:32.288","vulnerabilities":[{"cve":{"id":"CVE-2017-2285","sourceIdentifier":"vultures@jpcert.or.jp","published":"2017-08-02T16:29:00.567","lastModified":"2026-06-17T01:15:53.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de tipo Cross-Site Scripting (XSS) en Simple Custom CSS and JS en versiones anteriores a la 3.4 permite a los atacantes que inyecten scripts web o HTML arbitrarios mediante vectores no especificados."}],"affected":[{"source":"vultures@jpcert.or.jp","affectedData":[{"vendor":"SilkyPress","product":"Simple Custom CSS and JS","versions":[{"version":"prior to version 3.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:22:25.643999Z","id":"CVE-2017-2285","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:1.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"FE6A3F4D-31DF-4195-8EDB-B003B4453CD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:1.1:*:*:*:*:wordpress:*:*","matchCriteriaId":"1D2E36D5-23D0-440B-9678-340A0B89E8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:1.2:*:*:*:*:wordpress:*:*","matchCriteriaId":"062EAD3E-AB27-4713-8A22-34986A00DEF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:1.3:*:*:*:*:wordpress:*:*","matchCriteriaId":"BC13DEB7-CD88-4C66-BAD8-D8A3E8BD9221"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:1.4:*:*:*:*:wordpress:*:*","matchCriteriaId":"D28C6D31-1010-401D-AC77-3BF214A495C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:1.5:*:*:*:*:wordpress:*:*","matchCriteriaId":"D4C97E9D-2860-475A-A16D-C7C799DBCE58"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:1.6:*:*:*:*:wordpress:*:*","matchCriteriaId":"4D4F1A9F-6BE4-4780-BF62-38B97FC7FFAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"5E72E4A6-84C3-4ED6-8868-4C09FBD5C8AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.1:*:*:*:*:wordpress:*:*","matchCriteriaId":"C7FAD033-62A7-4503-A071-98FE474E6EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.2:*:*:*:*:wordpress:*:*","matchCriteriaId":"582DE8B3-F102-40F7-B03C-816C637E4F04"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.3:*:*:*:*:wordpress:*:*","matchCriteriaId":"39ED4178-ACBA-4C55-A975-23154290503E"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.4:*:*:*:*:wordpress:*:*","matchCriteriaId":"695B68E2-20C5-4E41-B188-3A2A8B9E00A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.5:*:*:*:*:wordpress:*:*","matchCriteriaId":"A44CC8F6-459C-433E-9F54-5155DE19AE07"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.6:*:*:*:*:wordpress:*:*","matchCriteriaId":"20BE7CA8-B712-4E7F-92EC-D3F25FC7EF32"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.7:*:*:*:*:wordpress:*:*","matchCriteriaId":"D15BDD75-E1E2-4561-B6A3-B63DB15B570D"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.8:*:*:*:*:wordpress:*:*","matchCriteriaId":"C201CD20-035C-4A4C-973B-9905CDE352E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.9:*:*:*:*:wordpress:*:*","matchCriteriaId":"64131CE2-CA15-4AC9-88D7-BFBE8A976042"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:2.10:*:*:*:*:wordpress:*:*","matchCriteriaId":"C699E9A8-5BB8-4B1E-BC37-EE08FF79FFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:3.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"3144C8A4-5D55-41C9-8429-1B9259966642"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:3.1:*:*:*:*:wordpress:*:*","matchCriteriaId":"54148D7E-6CD2-41AC-AA73-32328F4FCB14"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:3.2:*:*:*:*:wordpress:*:*","matchCriteriaId":"5B2BE06F-B93D-4BC1-A372-C8A8F2396C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:silkypress:simple_custom_css_and_js:3.3:*:*:*:*:wordpress:*:*","matchCriteriaId":"DECB5657-FE13-4D4E-A447-6A4BA3D7511B"}]}]}],"references":[{"url":"https://jvn.jp/en/jp/JVN31459091/index.html","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://plugins.trac.wordpress.org/changeset/1695440/#file6","source":"vultures@jpcert.or.jp","tags":["Patch","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/custom-css-js/#developers","source":"vultures@jpcert.or.jp","tags":["Product","Third Party Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8879","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://jvn.jp/en/jp/JVN31459091/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://plugins.trac.wordpress.org/changeset/1695440/#file6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://wordpress.org/plugins/custom-css-js/#developers","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product","Third Party Advisory"]},{"url":"https://wpvulndb.com/vulnerabilities/8879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}}]}