Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 11:30 p.m.7 views

CVE-2022-1395

The Easy FAQ with Expanding Text WordPress plugin through 3.2.8.3.1 does not sanitise and escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

4.8CVSS6.1AI score0.00577EPSS
SaveExploits2References1
OSV
OSV
added 2022/05/30 9:15 a.m.5 views

CVE-2022-1395

The Easy FAQ with Expanding Text WordPress plugin through 3.2.8.3.1 does not sanitise and escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

4.8CVSS5.8AI score0.00577EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/05/30 9:15 a.m.5 views

CVE-2022-1395

The Easy FAQ with Expanding Text WordPress plugin through 3.2.8.3.1 does not sanitise and escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

4.8CVSS5.5AI score0.00577EPSS
SaveExploits2References2
CVE
CVE
added 2022/05/30 8:35 a.m.127 views

CVE-2022-1395

CVE-2022-1395 affects WordPress Easy FAQ with Expanding Text plugin (versions

4.8CVSS4.8AI score0.00577EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2022/05/30 8:35 a.m.33 views

CVE-2022-1395 Easy FAQ with Expanding Text <= 3.2.8.3.1 - Admin+ Stored Cross-Site Scripting

The Easy FAQ with Expanding Text WordPress plugin through 3.2.8.3.1 does not sanitise and escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...

5.1AI score0.00577EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/05/30 12:0 a.m.7 views

WordPress plugin Easy FAQ with Expanding Text 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Easy FAQ with Expanding Text plugin 3.2.8.3.1 and earlier versions contain a cross-site scripting...

4.8CVSS5.6AI score0.00577EPSS
SaveExploits2References2
wpexploit
wpexploit
added 2022/05/10 12:0 a.m.141 views

Easy FAQ with Expanding Text <= 3.2.8.3.1 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed Put the following payload in any of the plugin's settings such as Font size, Font Color and save: "...

4.8CVSS0.8AI score0.00577EPSS
SaveExploits2
WPVulnDB
WPVulnDB
added 2022/05/10 12:0 a.m.26 views

Easy FAQ with Expanding Text <= 3.2.8.3.1 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed PoC Put the following payload in any of the plugin's settings such as Font size, Font Color and save: "...

4.8CVSS2.1AI score0.00577EPSS
SaveExploits2Affected Software1
Rows per page
Query Builder