CVE-2022-1904

🗓️ 27 Jun 2022 08:58:25Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 111 Views🌐 WEB

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 is prone to Reflected Cross-Site Scripting

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-1904	27 Jun 202209:15	–	attackerkb
CNNVD	WordPress plugin Pricing Tables 跨站脚本漏洞	27 Jun 202200:00	–	cnnvd
CNVD	WordPress Pricing Tables plugin跨站脚本漏洞	30 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-1904 Easy Pricing Tables < 3.2.1 - Reflected Cross-Site-Scripting	27 Jun 202208:58	–	cvelist
EUVD	EUVD-2022-25176	3 Oct 202520:07	–	euvd
Nuclei	WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting	7 Jun 202603:02	–	nuclei
NVD	CVE-2022-1904	27 Jun 202209:15	–	nvd
OSV	CVE-2022-1904	27 Jun 202209:15	–	osv
Prion	Cross site scripting	27 Jun 202209:15	–	prion
RedhatCVE	CVE-2022-1904	22 May 202523:32	–	redhatcve

NVD

Vulners

Node

fatcatapps easy_pricing_tablesRange<3.2.1wordpress

[
  {
    "product": "Pricing Tables WordPress Plugin – Easy Pricing Tables",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.2.1",
        "status": "affected",
        "version": "3.2.1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/92215d07-d129-49b4-a838-0de1a944c06b

Parameter	Position	Path	Description	CWE
column_names	query param	/wp-admin/admin-ajax.php	Reflected XSS due to unsanitized parameter reflected in admin-ajax response when a specific setting is enabled	CWE-79

21 Nov 2024 06:41Current

6Medium risk

Vulners AI Score6

CVSS 22.6

CVSS 3.16.1

EPSS0.02188

CWE-79