exploitDog

CVE-2022-0385

Опубликовано: 28 фев. 2022

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

The Crazy Bone WordPress plugin through 0.6.0 does not sanitise and escape the username submitted via the login from when displaying them back in the log dashboard, leading to an unauthenticated Stored Cross-Site scripting

Ссылки

https://wpscan.com/vulnerability/60067b8b-9fa5-40d1-817a-929779947891
Exploit
Third Party Advisory
https://wpscan.com/vulnerability/60067b8b-9fa5-40d1-817a-929779947891
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:crazy_bone_project:crazy_bone:*:*:*:*:*:wordpress:*:*

Версия до 0.6.0 (включая)

EPSS

Процентиль: 90%

0.05995

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-h6jw-5483-m266

CVSS3: 6.1

github

почти 4 года назад

The Crazy Bone WordPress plugin through 0.6.0 does not sanitise and escape the username submitted via the login from when displaying them back in the log dashboard, leading to an unauthenticated Stored Cross-Site scripting

EPSS

Процентиль: 90%

0.05995

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

CWE-79