Lucene search
PRIOn knowledge basePRION:CVE-2022-0737HistoryApr 18, 2022 - 6:15 p.m.
Cross site scripting
2022-04-1818:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
24.8%
The Text Hover WordPress plugin before 4.2 does not sanitize and escape the text to hover, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| text_hover | lt | 4.2 |
Related
patchstack
patchstack
wpvulndb
wpvulndb
Text Hover < 4.2 - Admin+ Stored Cross-Site Scripting
2022-03-28 00:00:00
cve
cve
CVE-2022-0737
2022-04-18 18:15:08
osv
osv
CVE-2022-0737
2022-04-18 18:15:08
cvelist
cvelist
CVE-2022-0737 Text Hover < 4.2 - Admin+ Stored Cross-Site Scripting
2022-04-18 17:10:33
wpexploit
wpexploit
Text Hover < 4.2 - Admin+ Stored Cross-Site Scripting
2022-03-28 00:00:00
nvd
nvd
CVE-2022-0737
2022-04-18 18:15:08