Lucene search

CVE-2022-4786

🗓️ 21 Feb 2023 09:11:15Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 28 Views🌐 WEB

The Video.js WordPress plugin through 4.5.0 allows Stored XSS attacks

Reporter	Title	Published	Views	Family All 7
Prion	Cross site scripting	21 Feb 202309:15	–	prion
Vulnrichment	CVE-2022-4786 Video.js - HTML5 Video Player for WordPress <= 4.5.0 - Contributor+ Stored XSS via Shortcode	21 Feb 202308:50	–	vulnrichment
Patchstack	WordPress Video.js – HTML5 Video Player for WordPress Plugin <= 4.5.0 is vulnerable to Cross Site Scripting (XSS)	5 Jan 202300:00	–	patchstack
WPVulnDB	Video.js - HTML5 Video Player for WordPress <= 4.5.0 - Contributor+ Stored XSS via Shortcode	26 Jan 202300:00	–	wpvulndb
NVD	CVE-2022-4786	21 Feb 202309:15	–	nvd
Cvelist	CVE-2022-4786 Video.js - HTML5 Video Player for WordPress <= 4.5.0 - Contributor+ Stored XSS via Shortcode	21 Feb 202308:50	–	cvelist
wpexploit	Video.js - HTML5 Video Player for WordPress <= 4.5.0 - Contributor+ Stored XSS via Shortcode	26 Jan 202300:00	–	wpexploit

Nvd

Vulners

Node

video.js_project video.jsRange≤4.5.0wordpress

[
  {
    "vendor": "Unknown",
    "product": "Video.js",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "4.5.0"
      }
    ],
    "defaultStatus": "affected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/fdad356f-cae4-4390-9a62-605201cee0c0

Parameter	Position	Path	Description	CWE
mp4	query param	/wp-content/plugins/videojs-shortcode/videojs.php	Stored Cross-Site Scripting vulnerability due to lack of validation and escaping in shortcode attributes.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Feb 2023 09:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS35.4

EPSS0.00119

SSVC

CWE-79