Lucene search

PatchstackCVE-2022-41554

HistoryMar 16, 2023 - 10:15 a.m.

CVE-2022-41554

2023-03-1610:15:09

CWE-79

Patchstack

web.nvd.nist.gov

cve-2022-41554

stored xss

cross-site scripting

xss vulnerability

john west slideshow se plugin

nvd

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

21.0%

JSON

Stored Cross-Site Scripting (XSS) vulnerability in John West Slideshow SE plugin <= 2.5.5 versions.

Affected configurations

Nvd

Vulners

Node

slideshow_se_projectslideshow_seRange≤2.5.5wordpress

VendorProductVersionCPE
slideshow_se_projectslideshow_se*cpe:2.3:a:slideshow_se_project:slideshow_se:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
slideshow_se_project	slideshow_se	*	cpe:2.3:a:slideshow_se_project:slideshow_se::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "slideshow-se",
    "product": "Slideshow SE",
    "vendor": "John West",
    "versions": [
      {
        "changes": [
          {
            "at": "2.5.6",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.5.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/slideshow-se/wordpress-slideshow-se-plugin-2-5-5-cross-site-scripting-xss-vulnerability?_s_id=cve