PT-2022-13741 · WordPress · Wordpress

Veshraj Ghimire · Published 2022-06-06 · Updated 2022-06-14 · CVE-2022-1241

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ask me WordPress theme versions prior to 6.8.2

Description The issue arises from the improper sanitization and escaping of several fields in the Edit Profile page, leading to Reflected Cross-Site Scripting issues.

Recommendations For versions prior to 6.8.2, update to version 6.8.2 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-1241

Affected Products

Wordpress

References · 5

• 🔥 https://wpscan.com/vulnerability/3258393a-eafb-4356-994e-2ff8ce223c9b · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-1241 · Security Note
• https://osv.dev/vulnerability/CVE-2022-1241 · Vendor Advisory
• https://t.me/cvenotify/31293 · Telegram Post
• https://t.me/cibsecurity/43999 · Telegram Post