Логотип exploitDog
bind:CVE-2022-4973
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-4973

Количество 4

Количество 4

ubuntu логотип

CVE-2022-4973

8 месяцев назад

WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with access to the WordPress post and page editor, typically consisting of Authors, Contributors, and Editors making it possible to inject arbitrary web scripts into posts and pages that execute if the the_meta(); function is called on that page.

CVSS3: 4.9
EPSS: Низкий
nvd логотип

CVE-2022-4973

8 месяцев назад

WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with access to the WordPress post and page editor, typically consisting of Authors, Contributors, and Editors making it possible to inject arbitrary web scripts into posts and pages that execute if the the_meta(); function is called on that page.

CVSS3: 4.9
EPSS: Низкий
debian логотип

CVE-2022-4973

8 месяцев назад

WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticate ...

CVSS3: 4.9
EPSS: Низкий
github логотип

GHSA-mhf3-8588-hqc6

8 месяцев назад

WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with access to the WordPress post and page editor, typically consisting of Authors, Contributors, and Editors making it possible to inject arbitrary web scripts into posts and pages that execute if the the_meta(); function is called on that page.

CVSS3: 4.9
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-4973

WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with access to the WordPress post and page editor, typically consisting of Authors, Contributors, and Editors making it possible to inject arbitrary web scripts into posts and pages that execute if the the_meta(); function is called on that page.

CVSS3: 4.9
0%
Низкий
8 месяцев назад
nvd логотип
CVE-2022-4973

WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with access to the WordPress post and page editor, typically consisting of Authors, Contributors, and Editors making it possible to inject arbitrary web scripts into posts and pages that execute if the the_meta(); function is called on that page.

CVSS3: 4.9
0%
Низкий
8 месяцев назад
debian логотип
CVE-2022-4973

WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticate ...

CVSS3: 4.9
0%
Низкий
8 месяцев назад
github логотип
GHSA-mhf3-8588-hqc6

WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with access to the WordPress post and page editor, typically consisting of Authors, Contributors, and Editors making it possible to inject arbitrary web scripts into posts and pages that execute if the the_meta(); function is called on that page.

CVSS3: 4.9
0%
Низкий
8 месяцев назад

Уязвимостей на страницу