Lucene search
WPScanCVELIST:CVE-2022-2391HistoryAug 08, 2022 - 1:48 p.m.
CVE-2022-2391 Inspiro Pro < 7.2.3 - Contributor+ Stored Cross-Site Scripting
2022-08-0813:48:28
CWE-79
WPScan
www.cve.org
1
0.001 Low
EPSS
Percentile
24.9%
The Inspiro PRO WordPress plugin does not sanitize the portfolio slider description, allowing users with privileges as low as Contributor to inject JavaScript into the description.
CNA Affected
[
{
"product": "Inspiro PRO",
"vendor": "Unknown",
"versions": [
{
"lessThan": "7.2.3",
"status": "affected",
"version": "7.2.3",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2022-2391
2022-08-08 14:15:09
wpexploit
wpexploit
Inspiro Premium < 7.2.3 - Contributor+ Stored Cross-Site Scripting
2022-07-18 00:00:00
patchstack
patchstack
wpvulndb
wpvulndb
Inspiro Premium < 7.2.3 - Contributor+ Stored Cross-Site Scripting
2022-07-18 00:00:00
prion
prion
Information disclosure
2022-08-08 14:15:00
nvd
nvd
CVE-2022-2391
2022-08-08 14:15:09