CVE-2022-1933

🗓️ 17 Jul 2022 10:35:39Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 86 Views🌐 WEB

The CDI WordPress plugin before 5.1.9 has a Reflected Cross-Site Scripting vulnerability

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-1933	17 Jul 202211:15	–	attackerkb
Circl	CVE-2022-1933	17 Jul 202214:27	–	circl
CNNVD	WordPress plugin CDI 跨站脚本漏洞	17 Jul 202200:00	–	cnnvd
CNVD	WordPress plugin CDI cross-site scripting vulnerability	19 Jul 202200:00	–	cnvd
Cvelist	CVE-2022-1933 CDI < 5.1.9 - Reflected Cross-Site-Scripting	17 Jul 202210:35	–	cvelist
Nuclei	WordPress CDI <5.1.9 - Cross Site Scripting	6 Jun 202603:01	–	nuclei
NVD	CVE-2022-1933	17 Jul 202211:15	–	nvd
OSV	CVE-2022-1933	17 Jul 202211:15	–	osv
Patchstack	WordPress CDI plugin <= 5.1.8 - Reflected Cross-Site-Scripting (XSS) vulnerability	21 Jun 202200:00	–	patchstack
Prion	Cross site scripting	17 Jul 202211:15	–	prion

NVD

Vulners

Node

collect_and_deliver_interface_for_woocommerce_project collect_and_deliver_interface_for_woocommerceRange<5.1.9wordpress

[
  {
    "product": "CDI – Collect and Deliver Interface for Woocommerce",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "5.1.9",
        "status": "affected",
        "version": "5.1.9",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/6cedb27f-6140-4cba-836f-63de98e521bf

Parameter	Position	Path	Description	CWE
trk	query param	/wp-admin/admin-ajax.php	Reflected Cross-Site Scripting via AJAX action parameter echoed back in response	CWE-79

21 Nov 2024 06:41Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 3.16.1

EPSS0.14451

CWE-79