Lucene search

CVE-2022-4508

🗓️ 16 Jan 2023 16:13:15Reported by WPScanType

The ConvertKit WordPress plugin before 2.0.5 allows Stored Cross-Site Scripting attacks via unvalidated shortcode attributes

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2022-4508 ConvertKit < 2.0.5 - Contributor+ Stored XSS	16 Jan 202315:38	–	cvelist
Prion	Cross site scripting	16 Jan 202316:15	–	prion
wpexploit	ConvertKit < 2.0.5 - Contributor+ Stored XSS	23 Dec 202200:00	–	wpexploit
WPVulnDB	ConvertKit < 2.0.5 - Contributor+ Stored XSS	23 Dec 202200:00	–	wpvulndb
NVD	CVE-2022-4508	16 Jan 202316:15	–	nvd

Nvd

Vulners

Node

convertkit convertkit_-_email_marketing\,_email_newsletter_and_landing_pagesRange<2.0.5wordpress

[
  {
    "vendor": "Unknown",
    "product": "ConvertKit",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "2.0.5"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/5101a979-7a53-40bf-8988-6347ef851eab

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Jan 2023 16:15Current

5.4Medium risk

Vulners AI Score5.4

CVSS35.4

EPSS0.01292