CVE-2022-0176

🗓️ 14 Feb 2022 09:20:56Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 91 Views🌐 WEB

The PowerPack Lite for Beaver Builder WordPress plugin before 1.2.9.3 is prone to a Reflected Cross-Site Scripting vulnerability

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-0176	14 Feb 202214:32	–	circl
CNNVD	WordPress plugin 跨站脚本漏洞	14 Feb 202200:00	–	cnnvd
CNVD	WordPress PowerPack Lite for Beaver Builder plugin cross-site scripting vulnerability	16 Feb 202200:00	–	cnvd
Cvelist	CVE-2022-0176 PowerPack Lite for Beaver Builder < 1.2.9.3 - Reflected Cross-Site Scripting	14 Feb 202209:20	–	cvelist
EUVD	EUVD-2022-15383	3 Oct 202520:07	–	euvd
NVD	CVE-2022-0176	14 Feb 202212:15	–	nvd
Patchstack	WordPress PowerPack Lite for Beaver Builder plugin <= 1.2.9.2 - Reflected Cross-Site Scripting (XSS) vulnerability	12 Jan 202200:00	–	patchstack
Prion	Cross site scripting	14 Feb 202212:15	–	prion
RedhatCVE	CVE-2022-0176	9 Jan 202610:44	–	redhatcve
wpexploit	PowerPack Lite for Beaver Builder < 1.2.9.3 - Reflected Cross-Site Scripting	12 Jan 202200:00	–	wpexploit

NVD

Vulners

Node

ideabox powerpack_for_beaver_builderRange<1.2.9.3wordpress

[
  {
    "product": "PowerPack Lite for Beaver Builder",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.2.9.3",
        "status": "affected",
        "version": "1.2.9.3",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/2655379
wpscan	www.wpscan.com/vulnerability/564a66d5-7fab-4de0-868a-e19466a507af

Parameter	Position	Path	Description	CWE
tab	query param	/wp-admin/options-general.php?page=ppbb-settings&tab=%22%3E%3Cimg+src+onerror%3Dalert%28/XSS/%29%3E	Reflected XSS via unsanitized tab parameter in admin settings page	CWE-79

15 Apr 2025 15:21Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 3.16.1

EPSS0.0023

CWE-79