Lucene search
PRIOn knowledge basePRION:CVE-2022-2375HistoryAug 22, 2022 - 3:15 p.m.
Cross site scripting
2022-08-2215:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
21.3%
The WP Sticky Button WordPress plugin before 1.4.1 does not have authorisation and CSRF checks when saving its settings, allowing unauthenticated users to update them. Furthermore, due to the lack of escaping in some of them, it could lead to Stored Cross-Site Scripting issues
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_sticky_button | lt | 1.4.1 |
Related
patchstack
patchstack
wpexploit
wpexploit
cve
cve
CVE-2022-2375
2022-08-22 15:15:14
nvd
nvd
CVE-2022-2375
2022-08-22 15:15:14
wpvulndb
wpvulndb
cvelist
cvelist