CVE-2022-2599

🗓️ 29 Aug 2022 17:15:37Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 90 Views🌐 WEB

The Anti-Malware Security & Brute-Force Firewall WP plugin v4.21.83 & prior allows Reflected Cross-Site Scripting

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-2599	29 Aug 202218:15	–	attackerkb
Circl	CVE-2022-2599	29 Aug 202222:34	–	circl
CNNVD	WordPress plugin Anti-Malware Security and Brute-Force Firewall 跨站脚本漏洞	29 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2599 Anti-Malware Security and Brute-Force Firewall < 4.21.83 - Reflected Cross-Site Scripting	29 Aug 202217:15	–	cvelist
Nuclei	WordPress Anti-Malware Security and Brute-Force Firewall <4.21.83 - Cross-Site Scripting	9 Jun 202605:43	–	nuclei
NVD	CVE-2022-2599	29 Aug 202218:15	–	nvd
OpenVAS	WordPress Anti-Malware Security and Brute-Force Firewall Plugin < 4.21.83 XSS Vulnerability	17 Sep 202200:00	–	openvas
Patchstack	WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.21.74 - Reflected Cross-Site Scripting (XSS) vulnerability	3 Aug 202200:00	–	patchstack
Prion	Cross site scripting	29 Aug 202218:15	–	prion
Positive Technologies	PT-2022-17625 · WordPress · Anti-Malware Security/Brute-Force Firewall	29 Aug 202200:00	–	ptsecurity

NVD

Vulners

Node

anti-malware_security_and_brute-force_firewall_project anti-malware_security_and_brute-force_firewallRange<4.21.83wordpress

[
  {
    "product": "Anti-Malware Security and Brute-Force Firewall",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "4.21.83",
        "status": "affected",
        "version": "4.21.83",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/276a7fc5-3d0d-446d-92cf-20060aecd0ef

Parameter	Position	Path	Description	CWE
GOTMLS_debug	query param	/wp-admin/admin.php?page=GOTMLS-settings	Reflected XSS via GET parameter GOTMLS_debug in admin dashboard	CWE-79
eli	query param	/wp-admin/admin.php?page=GOTMLS-settings	Reflected XSS via GET parameter eli in admin dashboard	CWE-79

21 Nov 2024 07:01Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

EPSS0.30915

CWE-79