4 matches found
CVE-2022-3506 Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wp
Cross-site Scripting XSS - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3...
5.5CVSS5.5AI score
SaveExploits0References4
CVE-2022-3506 Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wp
Cross-site Scripting XSS - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3...
5.5CVSS5.5AI score0.01145EPSS
SaveExploits1References2
CVE-2022-3506
CVE-2022-3506 corresponds to a stored XSS vulnerability in the WordPress Related Posts plugin (rp4wp) prior to version 2.1.3. Multiple connected sources confirm the flaw in the rp4wp[heading_text] parameter where unsanitized user input can inject arbitrary script, potentially compromising cookies...
5.5CVSS5.3AI score0.01145EPSS
SaveExploits1References2Affected Software1
20