Lucene search
PatchstackCVELIST:CVE-2022-44586HistoryNov 02, 2022 - 12:00 a.m.
CVE-2022-44586 WordPress AM-HiLi plugin <= 1.0 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
2022-11-0200:00:00
CWE-79
Patchstack
www.cve.org
wordpress
ayoub media
am-hili plugin
stored xss
4.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
19.4%
Auth. (admin+) Stored Cross-Site Scripting (XSS) in Ayoub Media AM-HiLi plugin <= 1.0 on WordPress.
CNA Affected
[
{
"vendor": "Ayoub Media",
"product": "AM-HiLi (WordPress plugin)",
"versions": [
{
"version": "<= 1.0",
"status": "affected",
"lessThanOrEqual": "1.0",
"versionType": "custom"
}
]
}
]Related
wpvulndb
wpvulndb
AM-HiLi <= 1.0 - Admin+ Stored XSS
2022-11-02 00:00:00
cve
cve
CVE-2022-44586
2022-11-02 22:15:17
nvd
nvd
CVE-2022-44586
2022-11-02 22:15:17
prion
prion
Cross site scripting
2022-11-02 22:15:00
patchstack
patchstack
4.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
19.4%
Related for CVELIST:CVE-2022-44586