PT-2022-24415

CVE-2022-38460

·

Published

2022-09-23

·

Updated

2022-09-26

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions NOTICE BOARD plugin versions <= 1.1 at WordPress.
Description The issue is related to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability. This means that an attacker with contributor or higher privileges can inject malicious scripts into the NOTICE BOARD plugin, potentially affecting users who interact with the compromised plugin.
Recommendations For NOTICE BOARD plugin versions <= 1.1, update to a version higher than 1.1 to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2022-38460
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com