Lucene search
HistoryOct 21, 2022 - 4:15 p.m.
CVE-2022-40311
cve-2022-40311
authentication
stored xss
cross-site scripting
fatcat apps
analytics cat
wordpress
4.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
19.5%
Auth. (admin+) Stored Cross-Site Scripting (XSS) in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress.
Affected configurations
Node
fatcat_appsanalytics_cat_–_google_analytics_made_easy_\(wordpress_plugin\)Range≤1.0.9
| CPE | Name | Operator | Version |
|---|---|---|---|
| fatcatapps:analytics_cat | fatcatapps analytics cat | le | 1.0.9 |
CNA Affected
[
{
"vendor": "Fatcat Apps",
"product": "Analytics Cat – Google Analytics Made Easy (WordPress plugin)",
"versions": [
{
"version": "<= 1.0.9",
"status": "affected",
"lessThanOrEqual": "1.0.9",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
prion
prion
Cross site scripting
2022-10-21 16:15:00
nvd
nvd
CVE-2022-40311
2022-10-21 16:15:11
wpvulndb
wpvulndb
Analytics Cat < 1.1.0 - Admin+ Stored Cross-Site Scripting
2022-09-29 00:00:00
patchstack
patchstack
cvelist
cvelist
4.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
19.5%
Related for CVE-2022-40311