CVE-2022-38971

2023-03-1609:15:09

CWE-79

[email protected]

web.nvd.nist.gov

cve-2022-38971

stored cross-site scripting

themekraft post form

registration form

user profiles

content forms

user submissions

version 2.7.5

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

21.0%

JSON

Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin <= 2.7.5 versions.

Affected configurations

Nvd

Node

themekraftpost_form_registration_form_profile_form_for_user_profiles_and_content_formsRange≤2.7.5wordpress

VendorProductVersionCPE
themekraftpost_form_registration_form_profile_form_for_user_profiles_and_content_forms*cpe:2.3:a:themekraft:post_form_registration_form_profile_form_for_user_profiles_and_content_forms:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
themekraft	post_form_registration_form_profile_form_for_user_profiles_and_content_forms	*	cpe:2.3:a:themekraft:post_form_registration_form_profile_form_for_user_profiles_and_content_forms::::::wordpress::*