Lucene search
HistoryJul 22, 2022 - 5:15 p.m.
CVE-2022-33191
wordpress
chinmoy paul
xss
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
19.4%
Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Chinmoy Paul’s Testimonials plugin <= 3.0.1 at WordPress.
Affected configurations
Node
testimonials_projecttestimonialsRange≤3.0.1wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| testimonials_project | testimonials | * | cpe:2.3:a:testimonials_project:testimonials:*:*:*:*:*:wordpress:*:* |
Related
wpvulndb
wpvulndb
Testimonials <= 3.0.1 - Contributor+ Stored Cross-Site Scripting
2022-07-19 00:00:00
patchstack
patchstack
prion
prion
Cross site scripting
2022-07-22 17:15:00
cvelist
cvelist
cnvd
cnvd
WordPress Testimonials plugin跨站脚本漏洞
2022-07-26 00:00:00
cve
cve
CVE-2022-33191
2022-07-22 17:15:08
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
19.4%
Related for NVD:CVE-2022-33191