CVE-2022-36282

🗓️ 23 Aug 2022 15:46:48Reported by PatchstackType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 61 Views

Authenticated Stored XSS in Roman Pronskiy's Search Exclude plugin at WordPres

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-36282	23 Aug 202220:21	–	circl
CNNVD	WordPress plugin Search Exclude 跨站脚本漏洞	23 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-36282 WordPress Search Exclude plugin <= 1.2.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	23 Aug 202215:46	–	cvelist
EUVD	EUVD-2022-38999	3 Oct 202520:07	–	euvd
NVD	CVE-2022-36282	23 Aug 202216:15	–	nvd
Patchstack	WordPress Search Exclude plugin <= 1.2.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	22 Aug 202200:00	–	patchstack
Prion	Cross site scripting	23 Aug 202216:15	–	prion
Positive Technologies	PT-2022-23289 · Roman Pronskiy · Search Exclude	23 Aug 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-36282 WordPress Search Exclude plugin <= 1.2.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	23 Aug 202215:46	–	vulnrichment
WPVulnDB	Search Exclude < 1.2.7 - Author+ Stored Cross-Site Scripting	22 Aug 202200:00	–	wpvulndb

NVD

Vulners

Node

search_exclude_project search_excludeRange≤1.2.6wordpress

[
  {
    "product": "Search Exclude (WordPress plugin)",
    "vendor": "Roman Pronskiy",
    "versions": [
      {
        "lessThanOrEqual": "1.2.6",
        "status": "affected",
        "version": "<= 1.2.6",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/search-exclude/wordpress-search-exclude-plugin-1-2-6-authenticated-stored-cross-site-scripting-xss-vulnerability
wordpress	www.wordpress.org/plugins/search-exclude/