Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-4198
HistoryJan 02, 2023 - 10:15 p.m.

Cross site scripting

2023-01-0222:15:00
PRIOn knowledge base
www.prio-n.com
2
wordpress
social sharing
plugin
vulnerability
stored cross-site scripting
admin
unfiltered html
multisite setup

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.3%

The WP Social Sharing WordPress plugin through 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

CPENameOperatorVersion
wp_social_sharingle2.2

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.3%