WordPress Favicon by RealFaviconGenerator plugin <= 1.3.22 - Reflected Cross-Site Scripting (XSS) vulnerability

🗓️ 21 Mar 2022 00:00:00Reported by Krzysztof ZającType

WordPress Favicon by RealFaviconGenerator plugin XSS vulnerabilit

Reporter	Title	Published	Views	Family All 8
wpexploit	Favicon by RealFaviconGenerator < 1.3.23 - Reflected Cross-Site Scripting	21 Mar 202200:00	–	wpexploit
Cvelist	CVE-2022-0471 Favicon by RealFaviconGenerator < 1.3.23 - Reflected Cross-Site Scripting	11 Apr 202214:40	–	cvelist
OpenVAS	WordPress Favicon by RealFaviconGenerator Plugin < 1.3.23 XSS Vulnerability	27 Apr 202200:00	–	openvas
WPVulnDB	Favicon by RealFaviconGenerator < 1.3.23 - Reflected Cross-Site Scripting	21 Mar 202200:00	–	wpvulndb
CNVD	WordPress Favicon by RealFaviconGenerator plugin cross-site scripting vulnerability	24 Mar 202200:00	–	cnvd
NVD	CVE-2022-0471	11 Apr 202215:15	–	nvd
Prion	Cross site scripting	11 Apr 202215:15	–	prion
CVE	CVE-2022-0471	11 Apr 202215:15	–	cve

Vulners

Node

-faviconRange≤1.3.22

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
wpscan	www.wpscan.com/vulnerability/499bfee4-b481-4276-b6ad-0eead6680f66
wordpress	www.wordpress.org/plugins/favicon-by-realfavicongenerator/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo