Lucene search
WPScanCVELIST:CVE-2022-2983HistoryNov 28, 2022 - 1:47 p.m.
CVE-2022-2983 Salat Times < 3.2.2 - Admin+ Stored Cross-Site Scripting
2022-11-2813:47:14
WPScan
www.cve.org
2
salat times
wordpress plugin
cross-site scripting
admin privilege
unfiltered_html capability
EPSS
0.001
Percentile
24.8%
The Salat Times WordPress plugin before 3.2.2 does not sanitize and escapes its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CNA Affected
[
{
"vendor": "Unknown",
"product": "Salat Times",
"collectionURL": "https://wordpress.org/plugins",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "3.2.2"
}
],
"defaultStatus": "unaffected"
}
]Related
prion
prion
Cross site scripting
2022-11-28 14:15:00
wpexploit
wpexploit
Salat Times < 3.2.2 - Admin+ Stored Cross-Site Scripting
2022-11-02 00:00:00
nvd
nvd
CVE-2022-2983
2022-11-28 14:15:11
wpvulndb
wpvulndb
Salat Times < 3.2.2 - Admin+ Stored Cross-Site Scripting
2022-11-02 00:00:00
patchstack
patchstack
cve
cve
CVE-2022-2983
2022-11-28 14:15:11