exploitDog

CVE-2022-3132

Опубликовано: 03 окт. 2022

Источник: nvd

CVSS3: 4.8

EPSS Низкий

Описание

The Goolytics WordPress plugin before 1.1.2 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Ссылки

https://wpscan.com/vulnerability/ed2dc1b9-f9f9-4e99-87b3-a614c223dd64
Exploit
Third Party Advisory
https://wpscan.com/vulnerability/ed2dc1b9-f9f9-4e99-87b3-a614c223dd64
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:goolytics_project:goolytics:*:*:*:*:*:wordpress:*:*

Версия до 1.1.2 (исключая)

EPSS

Процентиль: 35%

0.00138

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVE-2022-3132

CVSS3: 4.8

ubuntu

почти 3 года назад

The Goolytics WordPress plugin before 1.1.2 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

GHSA-xw96-874r-24gc

CVSS3: 4.8

github

почти 3 года назад

The Goolytics WordPress plugin before 1.1.2 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

EPSS

Процентиль: 35%

0.00138

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79