CVE-2022-4792 in News & Blog Designer Pack Plugininfo

Zusammenfassung

von MITRE • 30.01.2023

The News & Blog Designer Pack WordPress plugin before 3.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservieren

28.12.2022

Veröffentlichung

30.01.2023

Moderieren

akzeptiert

Eintrag

VDB-217905

CPE

bereit

CWE

CWE-79 (bestätigt)

CVSS

5.4 (NVD)

EPSS

0.00442

KEV

nein

Aktivitäten

very low

Sektor

Hostingprovider

Quellen

MITRE	https://www.cve.org/CVERecord?id=CVE-2022-4792
NVD	https://nvd.nist.gov/vuln/detail/CVE-2022-4792
CVE Details	https://www.cvedetails.com/cve/CVE-2022-4792/

◂ Zurück Übersicht Weiter ▸

Want to know what is going to be exploited?

We predict KEV entries!