Lucene search
PRIOn knowledge basePRION:CVE-2022-2171HistoryAug 01, 2022 - 1:15 p.m.
Design/Logic Flaw
2022-08-0113:15:00
PRIOn knowledge base
www.prio-n.com
5
progressive license
wordpress
csrf
admin
setting changes
stored xss
frontend
0.001 Low
EPSS
Percentile
21.2%
The Progressive License WordPress plugin through 1.1.0 is lacking any CSRF check when saving its settings, which could allow attackers to make a logged in admin change them. Furthermore, as the plugin allows arbitrary HTML to be inserted in one of the settings, this could lead to Stored XSS issue which will be triggered in the frontend as well.
| CPE | Name | Operator | Version |
|---|---|---|---|
| progressive_license | le | 1.1.0 |
Related
cve
cve
CVE-2022-2171
2022-08-01 13:15:10
nvd
nvd
CVE-2022-2171
2022-08-01 13:15:10
patchstack
patchstack
cvelist
cvelist
CVE-2022-2171 Progressive License <= 1.1.0 - CSRF to Stored XSS
2022-08-01 12:49:33