Lucene search
Rizacan TufanPATCHSTACK:A3E93320F0814361DBC010F6B21E5E4FHistorySep 15, 2022 - 12:00 a.m.
WordPress TaskBuilder plugin <= 1.0.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
2022-09-1500:00:00
Rizacan Tufan
patchstack.com
19
wordpress
taskbuilder
plugin
cross-site scripting
svg
file upload
EPSS
0.001
Percentile
24.8%
Authenticated Stored Cross-Site Scripting (XSS) vulnerability via SVG file upload discovered by Rizacan Tufan in WordPress TaskBuilder plugin (versions <= 1.0.7).
Solution
Update the WordPress Taskbuilder plugin to the latest available version (at least 1.0.8).
Related
wpvulndb
wpvulndb
TaskBuilder < 1.0.8 - Subscriber+ Stored XSS via SVG file upload
2022-09-15 00:00:00
cvelist
cvelist
prion
prion
Cross site scripting
2022-10-10 21:15:00
cnvd
cnvd
WordPress Taskbuilder Cross-Site Scripting Vulnerability
2022-10-12 00:00:00
wpexploit
wpexploit
TaskBuilder < 1.0.8 - Subscriber+ Stored XSS via SVG file upload
2022-09-15 00:00:00
nvd
nvd
CVE-2022-3137
2022-10-10 21:15:11
cve
cve
CVE-2022-3137
2022-10-10 21:15:11