Lucene search
HistoryMar 23, 2023 - 12:15 p.m.
CVE-2022-44742
cross-site scripting
yannick lefebvre
community events plugin
stored vulnerability
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
21.0%
Auth. (admin+) Stored Cross-Site Scripting vulnerability in Yannick Lefebvre Community Events plugin <= 1.4.8 versions.
Affected configurations
Node
community_events_projectcommunity_eventsRange<1.4.9wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| community_events_project | community_events | * | cpe:2.3:a:community_events_project:community_events:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Cross site scripting
2023-03-23 12:15:00
patchstack
patchstack
cvelist
cvelist
cve
cve
CVE-2022-44742
2023-03-23 12:15:12
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
21.0%
Related for NVD:CVE-2022-44742