Non évaluée

Text Hover < 4.2 - Admin+ Stored Cross-Site Scripting

CVE-2022-0737 Première détection SecPulse Apr 19, 2022

Description d'origine La description telle que publiée par la source (souvent en anglais).

The Text Hover WordPress plugin before 4.2 does not sanitize and escape the text to hover, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
web wpscan.com

Faits clés

Gravité: Non évaluée
Publication: Apr 19, 2022
Première détection SecPulse: Apr 19, 2022
CWE: CWE-79

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:55