Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-3132
HistoryOct 03, 2022 - 2:15 p.m.

Cross site scripting

2022-10-0314:15:00
PRIOn knowledge base
www.prio-n.com
6
goolytics
wordpress
cross-site scripting
vulnerability
unfiltered_html

0.001 Low

EPSS

Percentile

24.8%

The Goolytics WordPress plugin before 1.1.2 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

CPENameOperatorVersion
goolyticslt1.1.2

0.001 Low

EPSS

Percentile

24.8%