Lucene search

CVE-2022-41615

🗓️ 18 Nov 2022 23:25:15Reported by PatchstackType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 41 Views

CVE-2022-41615 XSS CSRF vulnerability in Store Locator plugin on WordPress

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2022-41615 WordPress Store Locator plugin <= 1.4.5 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability	18 Nov 202222:28	–	cvelist
Prion	Cross site request forgery (csrf)	18 Nov 202223:15	–	prion
Patchstack	WordPress Store Locator plugin <= 1.4.5 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability	28 Sep 202200:00	–	patchstack
NVD	CVE-2022-41615	18 Nov 202223:15	–	nvd
WPVulnDB	Store Locator < 1.4.6 - Stored XSS via CSRF	28 Sep 202200:00	–	wpvulndb

Nvd

Vulners

Node

agilelogix store_locatorRange<1.4.6wordpress

[
  {
    "vendor": "AGILELOGIX",
    "product": "Store Locator WordPress (WordPress plugin)",
    "versions": [
      {
        "version": "<= 1.4.5",
        "status": "affected",
        "lessThanOrEqual": "1.4.5",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/agile-store-locator/
patchstack	www.patchstack.com/database/vulnerability/agile-store-locator/wordpress-store-locator-plugin-1-4-5-cross-site-scripting-xss-via-cross-site-request-forgery-csrf-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Nov 2022 23:15Current

6.3Medium risk

Vulners AI Score6.3

CVSS36.1

EPSS0.0009