Lucene search
HistorySep 26, 2022 - 1:15 p.m.
CVE-2022-1755
wordpress plugin
cross-site scripting
cve-2022-1755
svg support plugin
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
24.8%
The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks
Affected configurations
Node
benbodhisvg_supportRange<2.5.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| benbodhi | svg_support | * | cpe:2.3:a:benbodhi:svg_support:*:*:*:*:*:wordpress:*:* |
Related
openvas
openvas
WordPress SVG Support Plugin < 2.5 XSS Vulnerability
2022-10-11 00:00:00
cnvd
cnvd
WordPress SVG Support Cross-Site Scripting Vulnerability
2022-09-28 00:00:00
cvelist
cvelist
CVE-2022-1755 SVG Support < 2.5 - Author+ Stored Cross-Site Scripting
2022-09-26 12:35:31
prion
prion
Cross site scripting
2022-09-26 13:15:00
patchstack
patchstack
cve
cve
CVE-2022-1755
2022-09-26 13:15:10
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
24.8%
Related for NVD:CVE-2022-1755