Lucene search
PRIOn knowledge basePRION:CVE-2022-2597HistorySep 05, 2022 - 1:15 p.m.
Design/Logic Flaw
2022-09-0513:15:00
PRIOn knowledge base
www.prio-n.com
6
visual portfolio
wordpress
logic flaw
unauthorized access
rest endpoints
arbitrary css
0.001 Low
EPSS
Percentile
24.8%
The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.19.0 does not have proper authorisation checks in some of its REST endpoints, allowing users with a role as low as contributor to call them and inject arbitrary CSS in arbitrary saved layouts
| CPE | Name | Operator | Version |
|---|---|---|---|
| visual_portfolio\\,_photo_gallery_\\&_post_grid | lt | 2.19.0 |
Related
patchstack
patchstack
cve
cve
CVE-2022-2597
2022-09-05 13:15:08
cvelist
cvelist
CVE-2022-2597 Visual Portfolio < 2.19.0 - Contributor+ CSS Injection
2022-09-05 12:35:21
wpexploit
wpexploit
Visual Portfolio < 2.19.0 - Contributor+ CSS Injection
2022-08-15 00:00:00
wpvulndb
wpvulndb
Visual Portfolio < 2.19.0 - Contributor+ CSS Injection
2022-08-15 00:00:00
nvd
nvd
CVE-2022-2597
2022-09-05 13:15:08