CVE-2022-2983

CVSS V2 None CVSS V3 None
Description
The Salat Times WordPress plugin before 3.2.2 does not sanitize and escapes its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Overview
  • CVE ID
  • CVE-2022-2983
  • Assigner
  • contact@wpscan.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-11-28T14:15:11.773
  • Last Modified Date
  • 2022-11-30T03:40:50.780
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:salat_times_project:salat_times:*:*:*:*:*:wordpress:*:* 1 OR 3.2.2
References
Reference URL Reference Tags
https://wpscan.com/vulnerability/e2af8c7f-9bd4-4902-8df8-72ffb414fdbf Exploit Third Party Advisory
History
Created Old Value New Value Data Type Notes
2022-12-07 18:05:17 Added to TrackCVE