Lucene search
PatchstackCVE-2022-35725HistorySep 09, 2022 - 3:15 p.m.
CVE-2022-35725
2022-09-0915:15:10
CWE-79
Patchstack
web.nvd.nist.gov
28
6
cve-2022-35725
authenticated
stored xss
cross-site scripting
nvd
wordpress
hans matzen
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.7%
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hans Matzen’s wp-forecast plugin <= 7.5 at WordPress.
Affected configurations
Node
wp-forecast_projectwp-forecastRange≤7.5wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wp-forecast_project | wp-forecast | * | cpe:2.3:a:wp-forecast_project:wp-forecast:*:*:*:*:*:wordpress:*:* |
CNA Affected
[
{
"product": "wp-forecast (WordPress plugin)",
"vendor": "Hans Matzen",
"versions": [
{
"lessThanOrEqual": "7.5",
"status": "affected",
"version": "<= 7.5",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
wpvulndb
wpvulndb
WP Forecast < 7.6 - Admin+ Stored Cross-Site Scripting
2022-08-25 00:00:00
nvd
nvd
CVE-2022-35725
2022-09-09 15:15:10
prion
prion
Cross site scripting
2022-09-09 15:15:00
patchstack
patchstack
cvelist
cvelist
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.7%
Related for CVE-2022-35725