exploitDog

CVE-2022-1320

Опубликовано: 23 мая 2022

Источник: nvd

CVSS3: 4.8

CVSS2: 3.5

EPSS Низкий

Описание

The Sliderby10Web WordPress plugin before 1.2.52 does not properly sanitize and escape some of its settings, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

Ссылки

https://wpscan.com/vulnerability/43581d6b-333a-48d9-a1ae-b9479da8ff87
Exploit
Third Party Advisory
https://wpscan.com/vulnerability/43581d6b-333a-48d9-a1ae-b9479da8ff87
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:10web:sliderby10web:*:*:*:*:*:wordpress:*:*

Версия до 1.2.52 (исключая)

EPSS

Процентиль: 51%

0.00282

Низкий

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-4jv2-f9mw-9vh9

CVSS3: 4.8

github

больше 3 лет назад

The Sliderby10Web WordPress plugin before 1.2.52 does not properly sanitize and escape some of its settings, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

EPSS

Процентиль: 51%

0.00282

Низкий

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79