Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 11:30 p.m.3 views

CVE-2022-1395

The Easy FAQ with Expanding Text WordPress plugin through 3.2.8.3.1 does not sanitise and escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

4.8CVSS6.1AI score0.00206EPSS
Exploits2References1
OSV
OSV
added 2022/05/30 9:15 a.m.1 views

CVE-2022-1395

The Easy FAQ with Expanding Text WordPress plugin through 3.2.8.3.1 does not sanitise and escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

4.8CVSS5.8AI score0.00206EPSS
Exploits2References1
ATTACKERKB
ATTACKERKB
added 2022/05/30 9:15 a.m.2 views

CVE-2022-1395

The Easy FAQ with Expanding Text WordPress plugin through 3.2.8.3.1 does not sanitise and escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

4.8CVSS5.5AI score0.00206EPSS
Exploits2References2
CVE
CVE
added 2022/05/30 8:35 a.m.95 views

CVE-2022-1395

CVE-2022-1395 affects WordPress Easy FAQ with Expanding Text plugin (versions

4.8CVSS4.8AI score0.00206EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2022/05/30 8:35 a.m.10 views

CVE-2022-1395 Easy FAQ with Expanding Text <= 3.2.8.3.1 - Admin+ Stored Cross-Site Scripting

The Easy FAQ with Expanding Text WordPress plugin through 3.2.8.3.1 does not sanitise and escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

5.1AI score0.00206EPSS
Exploits2References1
CNNVD
CNNVD
added 2022/05/30 12:0 a.m.1 views

WordPress plugin Easy FAQ with Expanding Text 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Easy FAQ with Expanding Text plugin 3.2.8.3.1 and earlier versions contain a cross-site scripting...

4.8CVSS5.6AI score0.00206EPSS
Exploits2References2
wpexploit
wpexploit
added 2022/05/10 12:0 a.m.129 views

Easy FAQ with Expanding Text <= 3.2.8.3.1 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed Put the following payload in any of the plugin's settings such as Font size, Font Color and save: "...

4.8CVSS0.8AI score0.00206EPSS
Exploits2
WPVulnDB
WPVulnDB
added 2022/05/10 12:0 a.m.23 views

Easy FAQ with Expanding Text <= 3.2.8.3.1 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed PoC Put the following payload in any of the plugin's settings such as Font size, Font Color and save: "...

4.8CVSS2.1AI score0.00206EPSS
Exploits2Affected Software1
Rows per page
Query Builder