CVE-2022-47433

2023-03-2913:15:07

CWE-79

[email protected]

web.nvd.nist.gov

cve-2022-47433

unauthenticated

reflected cross-site scripting

xss

daniel powney

multi rating plugin

nvd

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

0.001 Low

EPSS

Percentile

27.3%

JSON

Unauth. Reflected Cross-Site Scripting vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions.

Affected configurations

Vulners

NVD

Node

daniel_powneymulti_ratingRange≤5.0.5

CPENameOperatorVersion
multi_rating_project:multi_ratingmulti rating project multi ratingle5.0.5

CPE	Name	Operator	Version
multi_rating_project:multi_rating	multi rating project multi rating	le	5.0.5

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "multi-rating",
    "product": "Multi Rating",
    "vendor": "Daniel Powney",
    "versions": [
      {
        "changes": [
          {
            "at": "5.0.6",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "5.0.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]