Lucene search

[email protected]NVD:CVE-2022-41554

HistoryMar 16, 2023 - 10:15 a.m.

CVE-2022-41554

2023-03-1610:15:09

CWE-79

[email protected]

web.nvd.nist.gov

cve-2022-41554

stored cross-site scripting

john west slideshow se plugin

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

21.0%

JSON

Stored Cross-Site Scripting (XSS) vulnerability in John West Slideshow SE plugin <= 2.5.5 versions.

Affected configurations

Nvd

Node

slideshow_se_projectslideshow_seRange≤2.5.5wordpress

VendorProductVersionCPE
slideshow_se_projectslideshow_se*cpe:2.3:a:slideshow_se_project:slideshow_se:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
slideshow_se_project	slideshow_se	*	cpe:2.3:a:slideshow_se_project:slideshow_se::::::wordpress::*

References

patchstack.com/database/vulnerability/slideshow-se/wordpress-slideshow-se-plugin-2-5-5-cross-site-scripting-xss-vulnerability?_s_id=cve