CVE-2022-38073

Опубликовано: 21 сент. 2022

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

Multiple Authenticated (custom specific plugin role) Persistent Cross-Site Scripting (XSS) vulnerability in Awesome Support plugin <= 6.0.7 at WordPress.

Ссылки

https://patchstack.com/database/vulnerability/awesome-support/wordpress-awesome-support-plugin-6-0-7-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities
Third Party Advisory
https://wordpress.org/plugins/awesome-support/#developers
Product
Release Notes
https://patchstack.com/database/vulnerability/awesome-support/wordpress-awesome-support-plugin-6-0-7-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities
Third Party Advisory
https://wordpress.org/plugins/awesome-support/#developers
Product
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:getawesomesupport:awesome_support:*:*:*:*:*:wordpress:*:*

Версия до 6.0.7 (включая)

EPSS

Процентиль: 52%

0.00295

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-qrqm-574x-q7f2