Lucene search
PRIOn knowledge basePRION:CVE-2022-0381HistoryFeb 04, 2022 - 11:15 p.m.
Cross site scripting
2022-02-0423:15:00
PRIOn knowledge base
www.prio-n.com
3
0.002 Low
EPSS
Percentile
60.0%
The Embed Swagger WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping/sanitization and validation via the url parameter found in the ~/swagger-iframe.php file which allows attackers to inject arbitrary web scripts onto the page, in versions up to and including 1.0.0.
| CPE | Name | Operator | Version |
|---|---|---|---|
| embed_swagger | le | 1.0.0 |
Related
nvd
nvd
CVE-2022-0381
2022-02-04 23:15:12
wpexploit
wpexploit
Embed Swagger <= 1.0.0 - Reflected Cross-Site Scripting
2022-01-26 00:00:00
cve
cve
CVE-2022-0381
2022-02-04 23:15:12
wpvulndb
wpvulndb
Embed Swagger <= 1.0.0 - Reflected Cross-Site Scripting
2022-01-26 00:00:00
cvelist
cvelist
CVE-2022-0381 Embed Swagger <= 1.0.0 Reflected Cross-Site Scripting
2022-02-04 22:29:25
nuclei
nuclei
WordPress Embed Swagger <=1.0.0 - Cross-Site Scripting
2022-03-07 18:19:41
patchstack
patchstack