CVE-2022-29426

Опубликовано: 20 мая 2022

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Authenticated (contributor or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in 2J Slideshow Team's Slideshow, Image Slider by 2J plugin <= 1.3.54 at WordPress.

Ссылки

https://patchstack.com/database/vulnerability/2j-slideshow/wordpress-slideshow-image-slider-by-2j-plugin-1-3-54-authenticated-reflected-cross-site-scripting-xss-vulnerability
Third Party Advisory
https://wordpress.org/plugins/2j-slideshow/#developers
Product
https://patchstack.com/database/vulnerability/2j-slideshow/wordpress-slideshow-image-slider-by-2j-plugin-1-3-54-authenticated-reflected-cross-site-scripting-xss-vulnerability
Third Party Advisory
https://wordpress.org/plugins/2j-slideshow/#developers
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:2joomla:2j_slideshow:*:*:*:*:*:wordpress:*:*

Версия до 1.3.54 (включая)

EPSS

Процентиль: 37%

0.00162

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-79v6-3g86-v959