Lucene search
PatchstackCVELIST:CVE-2022-35275HistorySep 09, 2022 - 2:39 p.m.
CVE-2022-35275 WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
2022-09-0914:39:56
CWE-79
Patchstack
www.cve.org
4
wordpress
advanced order export
woocommerce
plugin
authenticated
reflected cross-site scripting
xss
vulnerability
algolplus
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.7%
Authenticated (shop manager+) Reflected Cross-Site Scripting (XSS) vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin <= 3.3.1 at WordPress.
CNA Affected
[
{
"product": "Advanced Order Export For WooCommerce (WordPress plugin)",
"vendor": "AlgolPlus",
"versions": [
{
"lessThanOrEqual": "3.3.1",
"status": "affected",
"version": "<= 3.3.1",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2022-35275
2022-09-09 15:15:10
patchstack
patchstack
nvd
nvd
CVE-2022-35275
2022-09-09 15:15:10
prion
prion
Cross site scripting
2022-09-09 15:15:00
openvas
openvas
wpvulndb
wpvulndb
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.7%
Related for CVELIST:CVE-2022-35275