Lucene search
HistoryAug 15, 2022 - 11:21 a.m.
CVE-2022-2378
easy student results
wordpress plugin
reflected cross-site scripting
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
40.2%
The Easy Student Results WordPress plugin through 2.2.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
Affected configurations
Node
easy_student_results_projecteasy_student_resultsRange≤2.2.8wordpress
Related
wpexploit
wpexploit
Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting
2022-07-19 00:00:00
cvelist
cvelist
CVE-2022-2378 Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting
2022-08-15 08:37:09
patchstack
patchstack
cve
cve
CVE-2022-2378
2022-08-15 11:21:22
wpvulndb
wpvulndb
Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting
2022-07-19 00:00:00
prion
prion
Cross site scripting
2022-08-15 11:21:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
40.2%
Related for NVD:CVE-2022-2378