CVE-2022-1549

🗓️ 13 Jun 2022 12:41:56Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 56 Views🌐 WEB

The WP Athletics WordPress plugin 1.1.7 Stored XS

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-1549	13 Jun 202213:15	–	attackerkb
CNNVD	WordPress plugin WP Athletics 跨站脚本漏洞	13 Jun 202200:00	–	cnnvd
CNVD	WordPress WP Athletics plugin跨站脚本漏洞	15 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-1549 WP Athletics <= 1.1.7 - Subscriber+ Stored Cross-Site Scripting	13 Jun 202212:41	–	cvelist
EUVD	EUVD-2022-24844	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1549	13 Jun 202213:15	–	nvd
Patchstack	WordPress WP Athletics plugin <= 1.1.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	17 May 202200:00	–	patchstack
Prion	Cross site scripting	13 Jun 202213:15	–	prion
RedhatCVE	CVE-2022-1549	22 May 202523:31	–	redhatcve
wpexploit	WP Athletics <= 1.1.7 - Subscriber+ Stored Cross-Site Scripting	17 May 202200:00	–	wpexploit

NVD

Vulners

Node

wp_athletics_project wp_athleticsRange≤1.1.7wordpress

[
  {
    "product": "WP Athletics",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.1.7",
        "status": "affected",
        "version": "1.1.7",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/afef06f5-71a6-4372-9648-0db59f9b254f

Parameter	Position	Path	Description	CWE
Event Name	request body	wp-admin/admin.php?page=wp-athletics-manage-results	Stored Cross-Site Scripting due to unsanitized input stored in DB and echoed back in admin dashboard.	CWE-79

21 Nov 2024 06:40Current

5.3Medium risk

Vulners AI Score5.3

CVSS 23.5

CVSS 3.15.4

EPSS0.00247

CWE-79

wp athletics wordpress plugin vulnerability xss nvd cve-2022-1549