CVE-2022-0898 IgniteUp <= 3.4.1 - Admin+ Stored Cross-Site Scripting

2022-05-0916:50:40

CWE-79

WPScan

www.cve.org

0.001 Low

EPSS

Percentile

25.0%

JSON

The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don’t have the unfiltered_html capability, which could lead to Stored Cross-Site Scripting issues

CNA Affected

[
  {
    "product": "IgniteUp – Coming Soon and Maintenance Mode",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "3.4.1",
        "status": "affected",
        "version": "3.4.1",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/f51d8345-3927-4be2-8145-e201371c8c43

0.001 Low

EPSS

Percentile

25.0%

JSON

Related for CVELIST:CVE-2022-0898