Vulners
Lucene search
CVE-2022-0780
šļøĀ 18 Apr 2022Ā 17:10:36Reported byĀ WPScanTypeĀ 
Ā cvešĀ web.nvd.nist.govš°ļøĀ 1Ā Media mentionsšĀ 73Ā Viewsš WEB
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | CVE-2022-0780 | 18 Apr 202218:15 | ā | attackerkb |
 | CVE-2022-0780 | 18 Apr 202222:23 | ā | circl |
 | WordPress plugin č·Øē«čę¬ę¼ę“ | 18 Apr 202200:00 | ā | cnnvd |
 | WordPress SearchIQ plugin cross-site scripting vulnerability | 20 Apr 202200:00 | ā | cnvd |
 | CVE-2022-0780 SearchIQ < 3.9 - Unauthenticated Stored XSS | 18 Apr 202217:10 | ā | cvelist |
 | EUVD-2022-15832 | 3 Oct 202520:07 | ā | euvd |
 | CVE-2022-0780 | 18 Apr 202218:15 | ā | nvd |
 | CVE-2022-0780 | 18 Apr 202218:15 | ā | osv |
 | WordPress SearchIQ plugin <= 3.8 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability | 28 Mar 202200:00 | ā | patchstack |
 | Cross site scripting | 18 Apr 202218:15 | ā | prion |
10
[
{
"product": "SearchIQ ā The Search Solution",
"vendor": "Unknown",
"versions": [
{
"lessThan": "3.9",
"status": "affected",
"version": "3.9",
"versionType": "custom"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| action | request body | wp-admin/admin-ajax.php | CSRF nonce verification bypass allows unauthenticated access to siq_ajax AJAX action and XSS via unsanitised customCss parameter | CWE-79 |
| customCss | request body | wp-admin/admin-ajax.php | CSRF nonce verification bypass allows unauthenticated access to siq_ajax AJAX action and XSS via unsanitised customCss parameter | CWE-79 |
| nononce | request body | wp-admin/admin-ajax.php | CSRF nonce verification bypass allows unauthenticated access to siq_ajax AJAX action and XSS via unsanitised customCss parameter | CWE-79 |
| task | request body | wp-admin/admin-ajax.php | CSRF nonce verification bypass allows unauthenticated access to siq_ajax AJAX action and XSS via unsanitised customCss parameter | CWE-79 |
Data
Build on a solid foundation withĀ Vulners data
WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data
Api
Power your application withĀ Vulners API
The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access
App
Assess and manage vulnerabilities withĀ VulnersĀ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 04:21Current
6.1Medium risk
Vulners AI Score6.1
CVSS 24.3
CVSS 3.16.1
EPSS0.00837