Lucene search

CVE-2022-0533

🗓️ 07 Mar 2022 09:09:15Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 112 Views🌐 WEB

The Ditty WordPress plugin before 3.0.15 has Reflected XSS vulnerability

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Prion	Cross site scripting	7 Mar 202209:15	–	prion
WPVulnDB	Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)	9 Feb 202200:00	–	wpvulndb
Cvelist	CVE-2022-0533 Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)	7 Mar 202208:16	–	cvelist
Nuclei	Ditty (formerly Ditty News Ticker) < 3.0.15 - Cross-Site Scripting	17 Oct 202307:20	–	nuclei
wpexploit	Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)	9 Feb 202200:00	–	wpexploit
NVD	CVE-2022-0533	7 Mar 202209:15	–	nvd

Nvd

Vulners

Node

metaphorcreations dittyRange<3.0.15wordpress

[
  {
    "product": "Ditty (formerly Ditty News Ticker)",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.0.15",
        "status": "affected",
        "version": "3.0.15",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/2675223/ditty-news-ticker
wpscan	www.wpscan.com/vulnerability/40f36692-c898-4441-ad24-2dc17856bd74

Parameter	Position	Path	Description	CWE
post_type	query param	/wp-admin/edit.php	Reflected XSS vulnerability on Ditty WordPress plugin due to improper handling of input parameters.	CWE-79
page	query param	/wp-admin/edit.php	Reflected XSS vulnerability on Ditty WordPress plugin due to improper handling of input parameters.	CWE-79
tab	query param	/wp-admin/edit.php	Reflected XSS vulnerability on Ditty WordPress plugin due to improper handling of input parameters.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Mar 2022 09:15Current

6Medium risk

Vulners AI Score6

CVSS24.3

CVSS36.1

EPSS0.05468

CWE-79