Lucene search
WPScanCVELIST:CVE-2022-0648HistoryMar 14, 2022 - 2:41 p.m.
CVE-2022-0648 Team Circle Image Slider With Lightbox < 1.0.16 - Reflected Cross-Site Scripting
2022-03-1414:41:40
CWE-79
WPScan
www.cve.org
4
cve-2022-0648
wordpress plugin
reflected cross-site scripting
admin page
EPSS
0.001
Percentile
40.2%
The Team Circle Image Slider With Lightbox WordPress plugin before 1.0.16 does not sanitize and escape the order_pos parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
CNA Affected
[
{
"product": "Team Circle Image Slider With Lightbox",
"vendor": "Unknown",
"versions": [
{
"lessThan": "1.0.16",
"status": "affected",
"version": "1.0.16",
"versionType": "custom"
}
]
}
]Related
wpvulndb
wpvulndb
patchstack
patchstack
prion
prion
Cross site scripting
2022-03-14 15:15:00
nvd
nvd
CVE-2022-0648
2022-03-14 15:15:10
cve
cve
CVE-2022-0648
2022-03-14 15:15:10
wpexploit
wpexploit