Lucene search
PRIOn knowledge basePRION:CVE-2022-2543HistorySep 05, 2022 - 1:15 p.m.
Design/Logic Flaw
2022-09-0513:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
plugin
authorisation
rest endpoints
unauthenticated users
css
saved layouts
0.001 Low
EPSS
Percentile
41.1%
The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.18.0 does not have proper authorisation checks in some of its REST endpoints, allowing unauthenticated users to call them and inject arbitrary CSS in arbitrary saved layouts
| CPE | Name | Operator | Version |
|---|---|---|---|
| visual_portfolio\\,_photo_gallery_\\&_post_grid | lt | 2.18.0 |
Related
patchstack
patchstack
wpvulndb
wpvulndb
Visual Portfolio < 2.18.0 - Unauthenticated CSS Injection
2022-08-15 00:00:00
cve
cve
CVE-2022-2543
2022-09-05 13:15:08
wpexploit
wpexploit
Visual Portfolio < 2.18.0 - Unauthenticated CSS Injection
2022-08-15 00:00:00
nvd
nvd
CVE-2022-2543
2022-09-05 13:15:08
cvelist
cvelist
CVE-2022-2543 Visual Portfolio < 2.18.0 - Unauthenticated CSS Injection
2022-09-05 12:35:20