Lucene search
HistoryDec 12, 2022 - 6:15 p.m.
CVE-2022-3933
wordpress
plugin
vulnerability
cross-site scripting
cve-2022-3933
essential real estate
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
34.3%
The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks.
Affected configurations
Node
g5themeessential_real_estateRange<3.9.6wordpress
Related
wpvulndb
wpvulndb
Essential Real Estate < 3.9.6 - Reflected Cross-Site-Scripting
2022-11-17 00:00:00
wpexploit
wpexploit
Essential Real Estate < 3.9.6 - Reflected Cross-Site-Scripting
2022-11-17 00:00:00
cvelist
cvelist
CVE-2022-3933 Essential Real Estate < 3.9.6 - Reflected Cross-Site-Scripting
2022-12-12 17:54:37
prion
prion
Cross site scripting
2022-12-12 18:15:00
nuclei
nuclei
WordPress Essential Real Estate <3.9.6 - Authenticated Cross-Site Scripting
2023-03-18 22:07:09
cve
cve
CVE-2022-3933
2022-12-12 18:15:12
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
34.3%
Related for NVD:CVE-2022-3933