Files
vuln-cve/data/2022/3xxx/CVE-2022-3207.json
T

88 lines
3.1 KiB
JSON

{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"state": "PUBLISHED",
"cveId": "CVE-2022-3207",
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"assignerShortName": "WPScan",
"dateUpdated": "2024-08-03T01:00:10.617Z",
"dateReserved": "2022-09-13T00:00:00.000Z",
"datePublished": "2022-10-10T00:00:00.000Z"
},
"containers": {
"cna": {
"title": "Simple File List < 4.4.12 - Admin+ Stored Cross-Site Scripting",
"providerMetadata": {
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan",
"dateUpdated": "2022-10-10T00:00:00.000Z"
},
"descriptions": [
{
"lang": "en",
"value": "The Simple File List WordPress plugin before 4.4.12 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)"
}
],
"affected": [
{
"vendor": "Unknown",
"product": "Simple File List",
"versions": [
{
"version": "4.4.12",
"status": "affected",
"lessThan": "4.4.12",
"versionType": "custom"
}
]
}
],
"references": [
{
"url": "https://wpscan.com/vulnerability/b57272ea-9a8a-482a-bbaa-5f202ca5b9aa"
}
],
"credits": [
{
"lang": "en",
"value": "Raad Haddad of Cloudyrion GmbH"
}
],
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"description": "CWE-79 Cross-Site Scripting (XSS)",
"cweId": "CWE-79",
"lang": "en"
}
]
}
],
"x_generator": "WPScan CVE Generator",
"source": {
"discovery": "EXTERNAL"
}
},
"adp": [
{
"providerMetadata": {
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE",
"dateUpdated": "2024-08-03T01:00:10.617Z"
},
"title": "CVE Program Container",
"references": [
{
"url": "https://wpscan.com/vulnerability/b57272ea-9a8a-482a-bbaa-5f202ca5b9aa",
"tags": [
"x_transferred"
]
}
]
}
]
}
}