PT-2022-26073 · WordPress · Soledad

Dave Jong · Published 2022-11-18 · Updated 2022-11-23 · CVE-2022-41788

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Soledad premium theme version 8.2.5 and earlier

Description A Cross-Site Scripting (XSS) issue affects the Soledad premium theme on WordPress, specifically for users with subscriber or higher authentication. This issue allows for malicious script execution.

Recommendations For Soledad premium theme version 8.2.5 and earlier, update to a version later than 8.2.5 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-41788

Affected Products

Soledad

References · 4

• https://osv.dev/vulnerability/CVE-2022-41788 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41788 · Security Note
• https://patchstack.com/database/vulnerability/soledad/wordpress-soledad-premium-theme-8-2-5-auth-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://themeforest.net/item/soledad-multiconcept-blogmagazine-wp-theme/12945398 · Note