Lucene search
+L

7 matches found

CNVD
CNVD
•added 2022/03/16 12:00 a.m.•85 views

WordPress Simple Tracking plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in versions of WordPress Simple Tracking plugin prior to 1.7, which stems from the plugin's...

4.8CVSS2.2AI score0.00622EPSS
SaveExploits2References1
OSV
OSV
•added 2022/03/14 3:15 p.m.•19 views

CVE-2022-0700

The Simple Tracking WordPress plugin before 1.7 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.00622EPSS
SaveExploits2References1
NVD
NVD
•added 2022/03/14 3:15 p.m.•37 views

CVE-2022-0700

The Simple Tracking WordPress plugin before 1.7 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS0.00622EPSS
SaveExploits2References1
CVE
CVE
•added 2022/03/14 2:41 p.m.•119 views

CVE-2022-0700

CVE-2022-0700 affects the WordPress Simple Tracking plugin prior to version 1.7. The vulnerability is a stored Cross-Site Scripting (XSS) caused by the plugin not sanitising and escaping settings, which could let high-privilege users (e.g., admins) execute scripts even when unfiltered_html is dis...

4.8CVSS4.7AI score0.00622EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/03/14 12:00 a.m.•4 views

PT-2022-13370

Name of the Vulnerable Software and Affected Versions Simple Tracking WordPress plugin versions prior to 1.7 Description The issue allows high privilege users, such as admins, to perform Cross-Site Scripting attacks. This is possible because the plugin does not properly sanitise and escape its...

4.8CVSS5.8AI score0.00622EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/14 12:00 a.m.•6 views

CVE-2022-0700: Improper Neutralization of Input During Web Page Generation

The Simple Tracking WordPress plugin before 1.7 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.7AI score0.00622EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2022/03/14 12:00 a.m.•22 views

WordPress plugin 跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in versions of WordPress Simple Tracking plugin prior to 1.7, which stems from the plugin's...

4.8CVSS5.2AI score0.00622EPSS
SaveExploits2References2
Rows per page
Query Builder