CVE-2022-2171

🗓️ 01 Aug 2022 12:49:33Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 60 Views

The Progressive License WordPress plugin through 1.1.0 lacks CSRF check, allowing attackers to make admin changes and trigger Stored XSS issue

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-2171	1 Aug 202213:15	–	attackerkb
Circl	CVE-2022-2171	1 Aug 202216:16	–	circl
CNNVD	WordPress plugin Progressive License 跨站请求伪造漏洞	1 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2171 Progressive License <= 1.1.0 - CSRF to Stored XSS	1 Aug 202212:49	–	cvelist
EUVD	EUVD-2022-34456	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2171	1 Aug 202213:15	–	nvd
OSV	CVE-2022-2171	1 Aug 202213:15	–	osv
Patchstack	WordPress Progressive License plugin <= 1.1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)	7 Jul 202200:00	–	patchstack
Prion	Design/Logic Flaw	1 Aug 202213:15	–	prion
RedhatCVE	CVE-2022-2171	23 May 202500:59	–	redhatcve

NVD

Vulners

Node

crowdfavorite progressive_licenseRange≤1.1.0wordpress

[
  {
    "product": "Progressive License",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.1.0",
        "status": "affected",
        "version": "1.1.0",
        "versionType": "custom"
      }
    ]
  }
]