exploitDog

CVE-2022-4260

Опубликовано: 02 янв. 2023

Источник: nvd

CVSS3: 4.8

EPSS Низкий

Описание

The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Ссылки

https://wpscan.com/vulnerability/d0cf24be-df87-4e1f-aae7-e9684c88e7db
Exploit
Third Party Advisory
https://wpscan.com/vulnerability/d0cf24be-df87-4e1f-aae7-e9684c88e7db
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wp-ban_project:wp-ban:*:*:*:*:*:wordpress:*:*

Версия до 1.69.1 (исключая)

EPSS

Процентиль: 76%

0.0097

Низкий

4.8 Medium

CVSS3

Дефекты

Связанные уязвимости

GHSA-7wx2-wjvp-v5h2

CVSS3: 4.8

github

около 3 лет назад

The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

BDU:2023-08981

CVSS3: 4.8

fstec

около 3 лет назад

Уязвимость плагина WP-Ban системы управления содержимым сайта WordPress, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)

EPSS

Процентиль: 76%

0.0097

Низкий

4.8 Medium

CVSS3

Дефекты