Lucene search
WPScanCVELIST:CVE-2022-4747HistoryFeb 06, 2023 - 7:59 p.m.
CVE-2022-4747 Post Category Image With Grid and Slider < 1.4.8 - Contributor+ Stored XSS via Shortcode
2023-02-0619:59:31
WPScan
www.cve.org
2
cve-2022-4747
wordpress
stored xss
EPSS
0.001
Percentile
25.5%
The Post Category Image With Grid and Slider WordPress plugin before 1.4.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CNA Affected
[
{
"vendor": "Unknown",
"product": "Post Category Image With Grid and Slider",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "1.4.8"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cve
cve
CVE-2022-4747
2023-02-06 20:15:12
nvd
nvd
CVE-2022-4747
2023-02-06 20:15:12
prion
prion
Cross site scripting
2023-02-06 20:15:00
wpexploit
wpexploit
wpvulndb
wpvulndb