Lucene search
PRIOn knowledge basePRION:CVE-2022-3631HistoryNov 14, 2022 - 3:15 p.m.
Cross site scripting
2022-11-1415:15:00
PRIOn knowledge base
www.prio-n.com
4
oauth client
digitalpixies
wordpress
stored cross-site scripting
settings
high-privilege users
admin
unfiltered_html
multisite setup
0.001 Low
EPSS
Percentile
24.8%
The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup).
| CPE | Name | Operator | Version |
|---|---|---|---|
| oauth_client | le | 1.1.0 |
Related
cve
cve
CVE-2022-3631
2022-11-14 15:15:54
patchstack
patchstack
wpvulndb
wpvulndb
OAuth Client by DigitialPixies <= 1.1.0 - Admin+ Stored Cross-Site Scripting
2022-10-21 00:00:00
wpexploit
wpexploit
OAuth Client by DigitialPixies <= 1.1.0 - Admin+ Stored Cross-Site Scripting
2022-10-21 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2022-3631
2022-11-14 15:15:54