Lucene search
WPScanVULNRICHMENT:CVE-2022-4830HistoryFeb 13, 2023 - 2:32 p.m.
CVE-2022-4830 Paid Memberships Pro < 2.9.9 - Contributor+ Stored XSS via Shortcode
2023-02-1314:32:30
WPScan
github.com
1
cve-2022-4830
paid memberships pro
stored xss
shortcode
wordpress plugin
The Paid Memberships Pro WordPress plugin before 2.9.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
Related
prion
prion
Cross site scripting
2023-02-13 15:15:00
cve
cve
CVE-2022-4830
2023-02-13 15:15:20
wpvulndb
wpvulndb
Paid Memberships Pro < 2.9.9 - Contributor+ Stored XSS via Shortcode
2023-01-27 00:00:00
cvelist
cvelist
openvas
openvas
WordPress Paid Memberships Pro Plugin < 2.9.9 XSS Vulnerability
2023-02-14 00:00:00
osv
osv
CVE-2022-4830
2023-02-13 15:15:20
wpexploit
wpexploit
Paid Memberships Pro < 2.9.9 - Contributor+ Stored XSS via Shortcode
2023-01-27 00:00:00
nvd
nvd
CVE-2022-4830
2023-02-13 15:15:20
AI Score
5.9
Confidence
High
SSVC
Exploitation
poc
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2022-4830