Files
vuln-cve/data/2022/2xxx/CVE-2022-2448.json
T

88 lines
3.1 KiB
JSON

{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"state": "PUBLISHED",
"cveId": "CVE-2022-2448",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"assignerShortName": "WPScan",
"dateUpdated": "2024-08-03T00:39:07.739Z",
"dateReserved": "2022-07-17T00:00:00.000Z",
"datePublished": "2022-10-10T00:00:00.000Z"
},
"containers": {
"cna": {
"title": "reSmush.it Image Optimizer < 0.4.6 - Admin+ Cross-Site Scripting",
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2022-10-10T00:00:00.000Z"
},
"descriptions": [
{
"lang": "en",
"value": "The reSmush.it WordPress plugin before 0.4.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when unfiltered_html is disallowed."
}
],
"affected": [
{
"vendor": "Unknown",
"product": "reSmush.it : the only free Image Optimizer & compress plugin",
"versions": [
{
"version": "0.4.6",
"status": "affected",
"lessThan": "0.4.6",
"versionType": "custom"
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/a4599942-2878-4da4-b55d-077775323b61"
}
],
"credits": [
{
"lang": "en",
"value": "Raad Haddad of Cloudyrion GmbH"
}
],
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"description": "CWE-79 Cross-Site Scripting (XSS)",
"cweId": "CWE-79",
"lang": "en"
}
]
}
],
"x_generator": "WPScan CVE Generator",
"source": {
"discovery": "EXTERNAL"
}
},
"adp": [
{
"providerMetadata": {
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE",
"dateUpdated": "2024-08-03T00:39:07.739Z"
},
"title": "CVE Program Container",
"references": [
{
"url": "https://wpscan.com/vulnerability/a4599942-2878-4da4-b55d-077775323b61",
"tags": [
"x_transferred"
]
}
]
}
]
}
}