CVE-2022-25037

1976-01-0100:00:00

mitre

github.com

AI Score

6.2

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

An issue in wanEditor v4.7.11 and fixed in v.4.7.12 and v.5 was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:wangeditor:wangeditor:*:*:*:*:*:*:*:*"
    ],
    "vendor": "wangeditor",
    "product": "wangeditor",
    "versions": [
      {
        "status": "affected",
        "version": "4.7.11",
        "lessThan": "4.7.12",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]