CVE-2022-1418

🗓️ 16 May 2022 14:30:59Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 131 Views🌐 WEB

The Social Stickers WordPress plugin through 2.2.9 is vulnerable to Stored Cross-Site Scripting via lack of CSRF checks and unescaped fields in Social Network settings

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-1418	16 May 202215:15	–	attackerkb
Circl	CVE-2022-1418	16 May 202218:26	–	circl
CNNVD	WordPress plugin Social Stickers 跨站脚本漏洞	16 May 202200:00	–	cnnvd
CNVD	WordPress Social Stickerss plugin跨站脚本漏洞	18 May 202200:00	–	cnvd
Cvelist	CVE-2022-1418 Social Stickers <= 2.2.9 - Stored Cross-Site Scripting via CSRF	16 May 202214:30	–	cvelist
EUVD	EUVD-2022-24732	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1418	16 May 202215:15	–	nvd
Patchstack	WordPress Social Stickers plugin <= 2.2.9 - Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability	20 Apr 202200:00	–	patchstack
Prion	Cross site scripting	16 May 202215:15	–	prion
RedhatCVE	CVE-2022-1418	22 May 202523:30	–	redhatcve

NVD

Vulners

Node

pluginmirror social_stickersRange≤2.2.9wordpress

[
  {
    "product": "Social Stickers",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "2.2.9",
        "status": "affected",
        "version": "2.2.9",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/3851e61e-f462-4259-af0a-8d832809d559

Parameter	Position	Path	Description	CWE
behance	request body	/wordpress/wp-admin/options-general.php?page=social-stickers%2Fsocial-stickers.php&tab=social_networks	CSRF weakness allowing an authenticated admin to change social network settings, with unsanitized input leading to Stored Cross-Site Scripting (XSS) on the admin page.	CWE-352, CWE-79

21 Nov 2024 06:40Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.3

CVSS 3.16.1

EPSS0.00099