CVE-2022-2538

🗓️ 29 Aug 2022 17:15:36Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 53 Views🌐 WEB

The WP Hide & Security Enhancer WordPress plugin before 1.8 is vulnerable to Reflected Cross-Site Scripting

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-2538	29 Aug 202218:15	–	attackerkb
Circl	CVE-2022-2538	29 Aug 202222:34	–	circl
CNNVD	WordPress plugin WP Hide & Security Enhancer 跨站脚本漏洞	29 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2538 WP Hide & Security Enhancer < 1.8 - Reflected Cross-Site Scripting	29 Aug 202217:15	–	cvelist
EUVD	EUVD-2022-34792	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2538	29 Aug 202218:15	–	nvd
Patchstack	WordPress WP Hide & Security Enhancer plugin <= 1.7.9.2 - Reflected Cross-Site Scripting (XSS) vulnerability	8 Aug 202200:00	–	patchstack
Prion	Cross site scripting	29 Aug 202218:15	–	prion
Positive Technologies	PT-2022-17253 · WordPress · Wp Hide & Security Enhancer	29 Aug 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2538	23 May 202500:05	–	redhatcve

NVD

Vulners

Node

nsp-code wp_hide_&_security_enhancerRange<1.8wordpress

[
  {
    "product": "WP Hide & Security Enhancer",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.8",
        "status": "affected",
        "version": "1.8",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/afa1e159-30bc-42d2-b3f8-8c868b113d3e

Parameter	Position	Path	Description	CWE
component	query param	/wp-admin/admin.php?page=wp-hide-cdn&component=%22+style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28/XSS/%29+x	Reflected XSS via an unescaped parameter output in an attribute of a backend page	CWE-79

21 Nov 2024 07:01Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.1

EPSS0.0021

CWE-79