CVE-2022-36244 in Media Player

Résumé

par MITRE • 30/05/2023

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripting (XSS) vulnerabilities via Shop Beat Control Panel found at www.shopbeat.co.za controlpanel.shopbeat.co.za.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Réserver: 18/07/2022
• Divulgation: 30/05/2023
• Modérer: accepté
• Entrée: VDB-230322
• CPE: prêt
• CWE: CWE-79 (confirmé)
• CVSS: 5.4 (NVD)
• EPSS: 0.00337
• KEV: non
• Activités: très faible
• Secteur: Police, Pharma, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-36244
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-36244
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-36244/