exploitDog

CVE-2022-4541

Опубликовано: 26 сент. 2024

Источник: nvd

CVSS3: 7.2

CVSS3: 6.1

EPSS Низкий

Описание

The WordPress Visitors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a spoofed HTTP Header value in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the nm_vistior page.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nitinmaurya:wordpress_visitors:*:*:*:*:*:wordpress:*:*

Версия до 1.0 (включая)

EPSS

Процентиль: 79%

0.01246

Низкий

7.2 High

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-3h5r-qj9r-h77r

CVSS3: 7.2

github

около 1 года назад

The WordPress Visitors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a spoofed HTTP Header value in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the nm_vistior page.

EPSS

Процентиль: 79%

0.01246

Низкий

7.2 High

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-79