logo
Vulnerability feed
CONTRIBUTE

Vulnerability

warn

CVE-2022-3136

Reference to the description:

https://nvd.nist.gov/vuln/detail/CVE-2022-3136

Description:
The Social Rocket WordPress plugin before 1.3.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Last updated date:
10/12/2022
Type:
exploit
Confidence:
HIGH
Date of publishing:
10/12/2022
Reference url to background

https://wpscan.com/vulnerability/913d7e78-23f6-4b0d-aca3-17051a2dc649

Vulnerability FeedContributorsAboutBlog

@inTheWild

©2024

Privacy Policy