PT-2023-14044 · WordPress · Tcbarrett Glossary

Thiennv · CVE-2022-41831 · Publicado 2023-03-21 · Atualizado 2023-03-24

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions TCBarrett WP Glossary plugin versions prior to 3.1.2

Description A Cross-Site Scripting issue affects the TCBarrett WP Glossary plugin, allowing unauthorized access for users with contributor or higher permissions.

Recommendations For TCBarrett WP Glossary plugin versions prior to 3.1.2, update to a version newer than 3.1.2 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2022-41831

Produtos afetados

Tcbarrett Glossary

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-41831 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-41831 · Aviso do Fabricante
• https://patchstack.com/database/vulnerability/wp-glossary/wordpress-wp-glossary-plugin-3-1-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota