Lucene search
PRIOn knowledge basePRION:CVE-2022-4307HistoryJan 23, 2023 - 3:15 p.m.
Design/Logic Flaw
2023-01-2315:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
xss
design flaw
logic flaw
unauthenticated attackers
high privilege users
0.001 Low
EPSS
Percentile
50.4%
The ??? ??? ??? WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pardakht-delkhah | lt | 2.9.3 |
Related
wpvulndb
wpvulndb
Pardakht Delkhah < 2.9.3 - Unauthenticated Stored XSS
2022-12-27 00:00:00
cvelist
cvelist
CVE-2022-4307 Pardakht Delkhah < 2.9.3 - Unauthenticated Stored XSS
2023-01-23 14:31:29
nvd
nvd
CVE-2022-4307
2023-01-23 15:15:14
cve
cve
CVE-2022-4307
2023-01-23 15:15:14
wpexploit
wpexploit
Pardakht Delkhah < 2.9.3 - Unauthenticated Stored XSS
2022-12-27 00:00:00