CVE-2022-1088

🗓️ 18 Apr 2022 17:10:51Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 64 Views🌐 WEB

The Page Security & Membership WordPress plugin through 1.5.15 is vulnerable to Stored Cross-Site Scripting attacks

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-1088	18 Apr 202218:15	–	attackerkb
Circl	CVE-2022-1088	18 Apr 202222:23	–	circl
CNNVD	WordPress plugin Page Security & Membership 跨站脚本漏洞	18 Apr 202200:00	–	cnnvd
CNVD	WordPress Page Security & Membership plugin cross-site scripting vulnerability	20 Apr 202200:00	–	cnvd
Cvelist	CVE-2022-1088 Page Security & Membership <= 1.5.15 - Admin+ Stored Cross-Site Scripting	18 Apr 202217:10	–	cvelist
EUVD	EUVD-2022-24432	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1088	18 Apr 202218:15	–	nvd
Patchstack	WordPress Page Security & Membership plugin <= 1.5.15 - Stored Cross-Site Scripting (XSS) vulnerability	28 Mar 202200:00	–	patchstack
Prion	Cross site scripting	18 Apr 202218:15	–	prion
RedhatCVE	CVE-2022-1088	22 May 202522:07	–	redhatcve

NVD

Vulners

Node

contextureintl page_security_&_membershipRange≤1.5.15wordpress

[
  {
    "product": "Page Security & Membership",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.5.15",
        "status": "affected",
        "version": "1.5.15",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/e86d456d-7a54-43e8-acf1-0b6a0a8bb41b

Parameter	Position	Path	Description	CWE
Force Public Pages	request body	/wp-admin/options-general.php?page=ps_manage_opts	Stored Cross-Site Scripting via unsanitized settings in Page Security & Membership plugin allows injection of a payload via the Force Public Pages setting.	CWE-79

21 Nov 2024 06:40Current

4.7Medium risk

Vulners AI Score4.7

CVSS 23.5

CVSS 3.14.8

EPSS0.00206

CWE-79