Lucene search
PRIOn knowledge basePRION:CVE-2022-2628HistoryOct 03, 2022 - 2:15 p.m.
Cross site scripting
2022-10-0314:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
24.9%
The DSGVO All in one for WP WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
| CPE | Name | Operator | Version |
|---|---|---|---|
| dsgvo_all_in_one_for_wp | lt | 4.2 |
Related
ubuntucve
ubuntucve
CVE-2022-2628
2022-10-03 00:00:00
cvelist
cvelist
wpexploit
wpexploit
DSGVO All in one for WP < 4.2 - Admin+ Stored Cross-Site Scripting
2022-09-12 00:00:00
cve
cve
CVE-2022-2628
2022-10-03 14:15:15
wpvulndb
wpvulndb
DSGVO All in one for WP < 4.2 - Admin+ Stored Cross-Site Scripting
2022-09-12 00:00:00
cnvd
cnvd
WordPress DSGVO All in one for WP cross-site scripting vulnerability
2022-10-11 00:00:00
nvd
nvd
CVE-2022-2628
2022-10-03 14:15:15