PT-2022-23928 · WordPress · Themes Awesome History Timeline

Ngo Van · Published 2022-09-23 · Updated 2022-09-23 · CVE-2022-37328

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Themes Awesome History Timeline plugin versions 1.0.5 and earlier

Description The issue is an Authenticated Stored Cross-Site Scripting (XSS) vulnerability. It affects the Themes Awesome History Timeline plugin at WordPress, allowing potential exploitation by authenticated users with author or higher privileges.

Recommendations For versions 1.0.5 and earlier, update to a version later than 1.0.5 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-37328

Affected Products

Themes Awesome History Timeline

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-37328 · Security Note
• https://osv.dev/vulnerability/CVE-2022-37328 · Vendor Advisory
• https://patchstack.com/database/vulnerability/timeline-awesome/wordpress-history-timeline-plugin-1-0-5-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve · Note
• https://wordpress.org/plugins/timeline-awesome · Note
• https://t.me/cibsecurity/50333 · Telegram Post