Lucene search
HistoryAug 23, 2022 - 4:15 p.m.
CVE-2022-29476
cve-2022-29476
unauthenticated
stored
cross-site scripting
xss
vulnerability
8 degree themes
notification bar
wordpress
nvd
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
33.6%
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in 8 Degree Themes otification Bar for WordPress plugin <= 1.1.8 at WordPress.
Affected configurations
Node
8_degree_themesnotification_bar_for_wordpressRange≤1.1.8
| CPE | Name | Operator | Version |
|---|---|---|---|
| 8degreethemes:notification_bar | 8degreethemes notification bar | le | 1.1.8 |
CNA Affected
[
{
"product": "Notification Bar for WordPress",
"vendor": "8 Degree Themes",
"versions": [
{
"lessThanOrEqual": "1.1.8",
"status": "affected",
"version": "<= 1.1.8",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
wpvulndb
wpvulndb
nvd
nvd
CVE-2022-29476
2022-08-23 16:15:10
prion
prion
Cross site scripting
2022-08-23 16:15:00
patchstack
patchstack
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
33.6%
Related for CVE-2022-29476