Files
vuln-nvd/data/2022/CVE-2022-2116.json
T

2 lines
2.0 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"product":"Contact Form DB – Elementor","vendor":"Unknown","versions":[{"lessThan":"1.8.0","status":"affected","version":"1.8.0","versionType":"custom"}]}],"source":"contact@wpscan.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:webacetechs:contact_form_db_-_elementor:*:*:*:*:*:wordpress:*:*","matchCriteriaId":"F55DB1C6-0CAB-4D00-9D57-7E2DFFCA37C7","versionEndExcluding":"1.8.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Contact Form DB WordPress plugin before 1.8.0 does not sanitise and escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting"},{"lang":"es","value":"El plugin Contact Form DB de WordPress versiones anteriores a 1.8.0, no sanea y escapa de algunos parámetros antes de devolverlos a los atributos, conllevando a un ataque de tipo Cross-Site Scripting Reflejado."}],"id":"CVE-2022-2116","lastModified":"2026-06-17T04:41:20.137","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-08-15T11:20:59.453","references":[{"source":"contact@wpscan.com","tags":["Exploit","Third Party Advisory"],"url":"https://wpscan.com/vulnerability/01568da4-2ecf-4cf9-8030-31868ce0a87a"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://wpscan.com/vulnerability/01568da4-2ecf-4cf9-8030-31868ce0a87a"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"contact@wpscan.com","type":"Secondary"}]}