Lucene search
HistoryJan 09, 2023 - 11:15 p.m.
CVE-2022-4301
sunshine photo cart
wordpress plugin
reflected cross-site scripting
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
50.2%
The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.
Affected configurations
Node
sunshinephotocartsunshine_photo_cartRange<2.9.15wordpress
Related
cve
cve
CVE-2022-4301
2023-01-09 23:15:27
cvelist
cvelist
CVE-2022-4301 Sunshine Photo Cart < 2.9.15 - Reflected XSS
2023-01-09 22:13:37
nuclei
nuclei
WordPress Sunshine Photo Cart <2.9.15 - Cross-Site Scripting
2023-03-05 13:42:10
prion
prion
Cross site scripting
2023-01-09 23:15:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
50.2%
Related for NVD:CVE-2022-4301