Lucene search
Vlad Vector (Patchstack)PATCHSTACK:152385A357BC9EB3EDAB50E4232C22F3HistorySep 01, 2022 - 12:00 a.m.
WordPress Word Search Puzzles game plugin <= 2.0.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
2022-09-0100:00:00
Vlad Vector (Patchstack)
patchstack.com
12
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
22.5%
Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities were discovered by Vlad Vector (Patchstack) in the WordPress Word Search Puzzles game plugin (versions <= 2.0.1).
Solution
Deactivate and delete. No reply from the vendor.
| CPE | Name | Operator | Version |
|---|---|---|---|
| word search puzzles game | le | 2.0.1 |
Related
nvd
nvd
CVE-2022-36383
2022-09-21 20:15:10
wpvulndb
wpvulndb
Word Search Puzzles game <= 2.0.1 - Contributor+ Stored XSS
2022-09-01 00:00:00
cvelist
cvelist
prion
prion
Cross site scripting
2022-09-21 20:15:00
cve
cve
CVE-2022-36383
2022-09-21 20:15:10
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
22.5%
Related for PATCHSTACK:152385A357BC9EB3EDAB50E4232C22F3