Lucene search

K
cvePatchstackCVE-2022-34650
HistoryJul 22, 2022 - 5:15 p.m.

CVE-2022-34650

2022-07-2217:15:08
CWE-79
Patchstack
web.nvd.nist.gov
49
5
cve-2022-34650
authenticated
cross-site scripting
xss
wpwax team
wordpress
nvd

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

19.4%

Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in wpWax Team plugin <= 1.2.6 at WordPress.

Affected configurations

Nvd
Vulners
Node
wpwaxteamRange1.2.6wordpress
VendorProductVersionCPE
wpwaxteam*cpe:2.3:a:wpwax:team:*:*:*:*:*:wordpress:*:*

CNA Affected

[
  {
    "product": "Team (WordPress plugin)",
    "vendor": "wpWax",
    "versions": [
      {
        "lessThanOrEqual": "1.2.6",
        "status": "affected",
        "version": "<= 1.2.6",
        "versionType": "custom"
      }
    ]
  }
]

Social References

More

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

19.4%

Related for CVE-2022-34650