CVE-2022-0834

🗓️ 23 Mar 2022 20:10:15Reported by [email protected]Type

The Amelia WordPress plugin has a Cross-Site Scripting vulnerability in the lastName parameter, allowing attackers to inject malicious web scripts onto the booking calendar

Reporter	Title	Published	Views	Family All 7
WPVulnDB	Amelia < 1.0.47 - Unauthenticated Stored XSS via lastName	2 Mar 202200:00	–	wpvulndb
CVE	CVE-2022-0834	23 Mar 202220:15	–	cve
Vulnrichment	CVE-2022-0834	23 Mar 202219:46	–	vulnrichment
CNVD	WordPress Amelia Plugin Cross-Site Scripting Vulnerability	25 Mar 202200:00	–	cnvd
Cvelist	CVE-2022-0834	23 Mar 202219:46	–	cvelist
Prion	Cross site scripting	23 Mar 202220:15	–	prion
Patchstack	WordPress Amelia plugin <= 1.0.46 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability	2 Mar 202200:00	–	patchstack

Nvd

Node

wpamelia ameliaRange≤1.0.46wordpress

Source	Link
wordfence	www.wordfence.com/vulnerability-advisories/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/73f12f22-c0a4-4010-9634-ce7308254028

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Mar 2022 20:15Current

CVSS23.5

CVSS35.4

EPSS0.001

CWE-79