Events Calendar Plugin sur WordPress Event post.php title/body cross site scripting 🚫 [Faux positif]

Avisinformation

⚠️ Ce problème semble être un faux positif. Veuillez vérifier les sources mentionnées et envisagez de ne pas utiliser cette entrée du tout.

Produitinformation

Taper

Nom

Chronologieinformation

01/11/2022 🔍
01/11/2022 +0 jours 🔍
01/11/2022 +0 jours 🔍
30/11/2022 +29 jours 🔍

Sourcesinformation

Bulletin: drive.google.com
Faux positif: Oui
Contesté: 🔍

CVE: CVE-2022-3796 (🔍)
GCVE (CVE): GCVE-0-2022-3796
GCVE (VulDB): GCVE-100-212632
scip Labs: https://www.scip.ch/en/?labs.20161013

Entréeinformation

Créé: 01/11/2022 16:38
Mise à jour: 30/11/2022 14:54
Changements: 01/11/2022 16:38 (42), 03/11/2022 19:42 (2), 03/11/2022 20:40 (7), 30/11/2022 14:51 (1), 30/11/2022 14:54 (1)
Complet: 🔍
Cache ID: 216::103

Soumettreinformation

Dupliqué

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion

 borkweb
(+0)
il y a 4 ans
We have tested this issue with The Events Calendar deactivated and the problem still occurs within WordPress core on Post and Pages. If this is, in fact, a vulnerability, it is within WordPress core itself and not The Events Calendar.
Thank you for your feedback.

Want to know what is going to be exploited?

We predict KEV entries!