Lucene search
HistoryNov 08, 2022 - 7:15 p.m.
CVE-2022-44741
cve-2022-44741
csrf
xss
david anderson testimonial slider
nvd
wordpress
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.9%
Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) in David Anderson Testimonial Slider plugin <= 1.3.1 on WordPress.
Affected configurations
Node
david_andersontestimonial_slider_\(wordpress_plugin\)Range≤1.3.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| slidervilla:testimonial_slider | slidervilla testimonial slider | le | 1.3.1 |
CNA Affected
[
{
"vendor": "David Anderson",
"product": "Testimonial Slider (WordPress plugin)",
"versions": [
{
"version": "<= 1.3.1",
"status": "affected",
"lessThanOrEqual": "1.3.1",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
wpvulndb
wpvulndb
Testimonial Slider <= 1.3.1 - Stored XSS via CSRF
2022-11-07 00:00:00
patchstack
patchstack
prion
prion
Cross site request forgery (csrf)
2022-11-08 19:15:00
nvd
nvd
CVE-2022-44741
2022-11-08 19:15:18
cvelist
cvelist
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.9%
Related for CVE-2022-44741