Lucene search
HistoryOct 10, 2022 - 9:15 p.m.
CVE-2022-3209
wordpress
soledad
xss
vulnerability
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
34.0%
The soledad WordPress theme before 8.2.5 does not sanitise the {id,datafilter[type],…} parameters in its penci_more_slist_post_ajax AJAX action, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.
Affected configurations
Node
pencidesignsoledadRange<8.2.5wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| pencidesign | soledad | * | cpe:2.3:a:pencidesign:soledad:*:*:*:*:*:wordpress:*:* |
Related
wpvulndb
wpvulndb
Soledad < 8.2.5 - Reflected Cross-site Scripting
2022-09-13 00:00:00
cve
cve
CVE-2022-3209
2022-10-10 21:15:11
patchstack
patchstack
wpexploit
wpexploit
Soledad < 8.2.5 - Reflected Cross-site Scripting
2022-09-13 00:00:00
prion
prion
Cross site scripting
2022-10-10 21:15:00
cvelist
cvelist
CVE-2022-3209 Soledad < 8.2.5 - Reflected Cross-site Scripting
2022-10-10 00:00:00
cnvd
cnvd
WordPress soledad cross-site scripting vulnerability
2022-10-12 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
34.0%
Related for NVD:CVE-2022-3209