Lucene search
Ngo Van Thien (Alliance project)PATCHSTACK:15C03A9BC393E3AC817BBA3D9BE6E419HistoryMay 26, 2022 - 12:00 a.m.
WordPress Travel Management plugin <= 2.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
2022-05-2600:00:00
Ngo Van Thien (Alliance project)
patchstack.com
7
0.001 Low
EPSS
Percentile
25.0%
Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities were discovered by Ngo Van Thien (Patchstack Alliance) in the WordPress Travel Management plugin (versions <= 2.0).
Solution
Deactivate and delete. This plugin has been closed as of May 6, 2022 and is not available for download. This closure is temporary, pending a full review.
| CPE | Name | Operator | Version |
|---|---|---|---|
| travel management | le | 2.0 |
Related
cnvd
cnvd
WordPress Nicdark d.o.o. Travel Management plugin跨站脚本漏洞
2022-06-17 00:00:00
cve
cve
CVE-2022-27859
2022-06-15 14:15:13
cvelist
cvelist
prion
prion
Cross site scripting
2022-06-15 14:15:00
nvd
nvd
CVE-2022-27859
2022-06-15 14:15:13
wpvulndb
wpvulndb
Travel Management <= 2.0 - Contributor+ Stored Cross-Site Scripting
2022-06-14 00:00:00