Lucene search

PatchstackCVELIST:CVE-2022-45827

HistoryJun 12, 2023 - 12:44 p.m.

CVE-2022-45827 WordPress Video Contest WordPress Plugin Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)

2023-06-1212:44:08

CWE-79

Patchstack

www.cve.org

cve-2022-45827

wordpress

cross site scripting

authenticated

stored

galleryplugins

video contest

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

0.0005 Low

EPSS

Percentile

18.3%

JSON

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GalleryPlugins Video Contest plugin <= 3.2 versions.

CNA Affected

[
  {
    "collectionURL": "https://codecanyon.net/",
    "defaultStatus": "unaffected",
    "packageName": "video-contest",
    "product": "Video Contest",
    "vendor": "GalleryPlugins",
    "versions": [
      {
        "lessThanOrEqual": "3.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/video-contest/wordpress-video-contest-wordpress-plugin-plugin-3-2-cross-site-scripting-xss?_s_id=cve