Lucene search
+L

7 matches found

attackerkb
attackerkb
•added 2022/10/03 2:15 p.m.•9 views

CVE-2022-2763

The WP Socializer WordPress plugin before 7.3 does not sanitise and escape some of its Icons settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.9AI score0.00734EPSS
SaveExploits2References2
NVD
NVD
•added 2022/10/03 2:15 p.m.•45 views

CVE-2022-2763

The WP Socializer WordPress plugin before 7.3 does not sanitise and escape some of its Icons settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS0.00734EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
•added 2022/10/03 2:15 p.m.•36 views

CVE-2022-2763

The WP Socializer WordPress plugin before 7.3 does not sanitise and escape some of its Icons settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.9AI score0.00734EPSS
SaveExploits2References2
CVE
CVE
•added 2022/10/03 1:45 p.m.•87 views

CVE-2022-2763

Summary: CVE-2022-2763 affects the WP Socializer WordPress plugin prior to 7.3. The issue arises from insufficient sanitisation/escaping of some Icons settings, enabling a highly privileged user (e.g., admin) to perform a Stored Cross-Site Scripting (XSS) attack even when unfiltered_html is disal...

4.8CVSS4.6AI score0.00734EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2022/10/03 1:45 p.m.•52 views

CVE-2022-2763 WP Socializer < 7.3 - Admin+ Stored Cross-Site Scripting

The WP Socializer WordPress plugin before 7.3 does not sanitise and escape some of its Icons settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.9AI score0.00734EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/03 12:00 a.m.•2 views

CVE-2022-2763: Improper Neutralization of Input During Web Page Generation

The WP Socializer WordPress plugin before 7.3 does not sanitise and escape some of its Icons settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.7AI score0.00734EPSS
SaveExploits2References2
WPVulnDB
WPVulnDB
•added 2022/09/06 12:00 a.m.•24 views

WP Socializer < 7.3 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its Icons settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC Activate the Share Icons feature of the...

4.8CVSS4.6AI score0.00734EPSS
SaveExploits2Affected Software1
Rows per page
Query Builder