CVE-2022-1937

🗓️ 11 Jul 2022 12:56:35Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 79 Views

The Awin Data Feed WordPress plugin before 1.8 is vulnerable to Reflected Cross-Site Scripting via an AJAX action

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-1937	11 Jul 202213:15	–	attackerkb
CNNVD	WordPress plugin Awin Data Feed 跨站脚本漏洞	11 Jul 202200:00	–	cnnvd
CNVD	WordPress plugin Awin Data Feed cross-site scripting vulnerability	15 Jul 202200:00	–	cnvd
Cvelist	CVE-2022-1937 Awin Data Feed < 1.8 - Reflected Cross-Site Scripting	11 Jul 202212:56	–	cvelist
EUVD	EUVD-2022-25206	3 Oct 202520:07	–	euvd
Nuclei	WordPress Awin Data Feed <=1.6 - Cross-Site Scripting	6 Jun 202603:01	–	nuclei
NVD	CVE-2022-1937	11 Jul 202213:15	–	nvd
Prion	Cross site scripting	11 Jul 202213:15	–	prion
Positive Technologies	PT-2022-14202 · WordPress · Awin Data Feed	11 Jul 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-1937	22 May 202523:32	–	redhatcve

NVD

Vulners

Node

awin awin_data_feedRange<1.8wordpress

[
  {
    "product": "Awin Data Feed",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.8",
        "status": "affected",
        "version": "1.8",
        "versionType": "custom"
      }
    ]
  }
]