Lucene search

[email protected]NVD:CVE-2022-34650

HistoryJul 22, 2022 - 5:15 p.m.

CVE-2022-34650

2022-07-2217:15:08

CWE-79

[email protected]

web.nvd.nist.gov

authenticated

stored cross-site scripting

wpwax team plugin

wordpress

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

19.4%

JSON

Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in wpWax Team plugin <= 1.2.6 at WordPress.

Affected configurations

Nvd

Node

wpwaxteamRange≤1.2.6wordpress

VendorProductVersionCPE
wpwaxteam*cpe:2.3:a:wpwax:team:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
wpwax	team	*	cpe:2.3:a:wpwax:team::::::wordpress::*

References

patchstack.com/database/vulnerability/adl-team/wordpress-team-plugin-1-2-6-multiple-stored-cross-site-scripting-xss-vulnerabilities

wordpress.org/plugins/adl-team/#description