Lucene search
PRIOn knowledge basePRION:CVE-2022-3096HistoryOct 31, 2022 - 4:15 p.m.
Cross site scripting
2022-10-3116:15:00
PRIOn knowledge base
www.prio-n.com
3
wp total hacks
low privilege users
modification
stored cross-site scripting
administrators
sanitisation
0.001 Low
EPSS
Percentile
25.0%
The WP Total Hacks WordPress plugin through 4.7.2 does not prevent low privilege users from modifying the plugin’s settings. This could allow users such as subscribers to perform Stored Cross-Site Scripting attacks against other users, like administrators, due to the lack of sanitisation and escaping as well.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_total_hacks | le | 4.7.2 |
Related
nvd
nvd
CVE-2022-3096
2022-10-31 16:15:10
cve
cve
CVE-2022-3096
2022-10-31 16:15:10
cvelist
cvelist
patchstack
patchstack
wpvulndb
wpvulndb
WP Total Hacks <= 4.7.2 - Subscriber+ Arbitrary Options Update to Stored XSS
2022-10-10 00:00:00
wpexploit
wpexploit
WP Total Hacks <= 4.7.2 - Subscriber+ Arbitrary Options Update to Stored XSS
2022-10-10 00:00:00