PT-2022-17821 · Mammothology Ab · Mammothology Ab Press Optimizer

Ptsfence · Published 2022-10-17 · Updated 2022-10-19 · CVE-2022-26375

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mammothology AB Press Optimizer plugin versions 1.1.1 and earlier

Description The issue is related to a Stored Cross-Site Scripting (XSS) vulnerability. This vulnerability allows an attacker to inject malicious scripts into the website, potentially leading to unauthorized access or control. The vulnerability requires authentication with admin or higher privileges.

Recommendations For Mammothology AB Press Optimizer plugin versions 1.1.1 and earlier, update to a version later than 1.1.1 to resolve the issue. As a temporary workaround, consider restricting access to the plugin's administrative interface to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-26375

Affected Products

Mammothology Ab Press Optimizer

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-26375 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26375 · Vendor Advisory
• https://patchstack.com/database/vulnerability/ab-press-optimizer-lite/wordpress-ab-press-optimizer-plugin-1-1-1-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://wordpress.org/plugins/ab-press-optimizer-lite · Note
• https://t.me/cibsecurity/51628 · Telegram Post