PT-2022-13511

CVE-2022-0898

·

تاريخ النشر

2022-05-09

·

تاريخ التحديث

2022-05-16

الوصف من

CVSS 3.1
5.4
متوسطة
المقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions IgniteUp WordPress plugin versions through 3.4.1
Description The issue arises when high privilege users do not have the unfiltered html capability, leading to potential Stored Cross-Site Scripting issues due to the lack of sanitization and escaping of some fields.
Recommendations For IgniteUp WordPress plugin versions through 3.4.1, consider updating to a version that addresses this issue, as the current version does not properly sanitize and escape certain fields, potentially leading to security problems. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾