Lucene search
HistoryDec 05, 2022 - 4:15 a.m.
CVE-2022-43497
wordpress
vulnerability
cross-site scripting
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.002 Low
EPSS
Percentile
57.2%
Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7.
Affected configurations
Node
wordpresswordpressRange<3.7.40
ORwordpresswordpressRange3.8–3.8.40
ORwordpresswordpressRange3.9–3.9.39
ORwordpresswordpressRange4.0–4.0.37
ORwordpresswordpressRange4.1–4.1.37
ORwordpresswordpressRange4.2–4.2.34
ORwordpresswordpressRange4.3–4.3.30
ORwordpresswordpressRange4.4–4.4.29
ORwordpresswordpressRange4.5–4.5.28
ORwordpresswordpressRange4.6–4.6.25
ORwordpresswordpressRange4.7–4.7.25
ORwordpresswordpressRange4.8–4.8.21
ORwordpresswordpressRange4.9–4.9.22
ORwordpresswordpressRange5.0–5.0.18
ORwordpresswordpressRange5.1–5.1.15
ORwordpresswordpressRange5.2–5.2.17
ORwordpresswordpressRange5.3–5.3.14
ORwordpresswordpressRange5.4–5.4.12
ORwordpresswordpressRange5.5–5.5.11
ORwordpresswordpressRange5.6–5.6.10
ORwordpresswordpressRange5.7–5.7.8
ORwordpresswordpressRange5.8–5.8.6
ORwordpresswordpressRange5.9–5.9.5
ORwordpresswordpressRange6.0–6.0.3
Related
osv
osv
CVE-2022-43497
2022-12-05 04:15:10
BIT-wordpress-2022-43497
2024-03-06 11:09:47
BIT-wordpress-multisite-2022-43497
2024-03-06 11:09:30
prion
prion
Cross site scripting
2022-12-05 04:15:00
cve
cve
CVE-2022-43497
2022-12-05 04:15:10
cvelist
cvelist
CVE-2022-43497
2022-12-05 00:00:00
debiancve
debiancve
CVE-2022-43497
2022-12-05 04:15:10
ubuntucve
ubuntucve
CVE-2022-43497
2022-12-05 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2023-03-13 00:10:31
openvas
openvas
WordPress Multiple Vulnerabilities (Oct 2022) - Linux
2022-10-19 00:00:00
WordPress Multiple Vulnerabilities (Oct 2022) - Windows
2022-10-19 00:00:00
Debian: Security Advisory (DSA-5279-2)
2022-11-16 00:00:00
jvn
jvn
JVN#09409909: Multiple vulnerabilities in WordPress
2022-11-08 00:00:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.002 Low
EPSS
Percentile
57.2%
Related for NVD:CVE-2022-43497