Lucene search
HistoryNov 28, 2022 - 2:15 p.m.
CVE-2022-2311
wordpress
cross-site scripting
find and replace
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
40.3%
The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue.
Affected configurations
Node
find_and_replace_all_projectfind_and_replace_allRange<1.3wordpress
Related
cvelist
cvelist
CVE-2022-2311 Find and Replace All < 1.3 - Reflected Cross Site Scripting
2022-11-28 13:47:13
cve
cve
CVE-2022-2311
2022-11-28 14:15:11
patchstack
patchstack
wpexploit
wpexploit
Find and Replace All < 1.3 - Reflected Cross Site Scripting
2022-11-03 00:00:00
prion
prion
Cross site scripting
2022-11-28 14:15:00
wpvulndb
wpvulndb
Find and Replace All < 1.3 - Reflected Cross Site Scripting
2022-11-03 00:00:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
40.3%
Related for NVD:CVE-2022-2311