Lucene search
PatchstackCVE-2022-35275HistorySep 09, 2022 - 3:15 p.m.
CVE-2022-35275
2022-09-0915:15:10
CWE-79
Patchstack
web.nvd.nist.gov
39
6
cve-2022-35275
authenticated
xss
algolplus
advanced order export
woocommerce
wordpress
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.7%
Authenticated (shop manager+) Reflected Cross-Site Scripting (XSS) vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin <= 3.3.1 at WordPress.
Affected configurations
Node
algolplusadvanced_order_exportRange≤3.3.1wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| algolplus | advanced_order_export | * | cpe:2.3:a:algolplus:advanced_order_export:*:*:*:*:*:wordpress:*:* |
CNA Affected
[
{
"product": "Advanced Order Export For WooCommerce (WordPress plugin)",
"vendor": "AlgolPlus",
"versions": [
{
"lessThanOrEqual": "3.3.1",
"status": "affected",
"version": "<= 3.3.1",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
cvelist
cvelist
patchstack
patchstack
nvd
nvd
CVE-2022-35275
2022-09-09 15:15:10
prion
prion
Cross site scripting
2022-09-09 15:15:00
openvas
openvas
wpvulndb
wpvulndb
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.7%
Related for CVE-2022-35275