PT-2022-27812 · Unknown · Auto Upload Images

Published 2022-12-21 · Updated 2024-05-17 · CVE-2022-4632

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Auto Upload Images versions up to 3.3.0

Description A vulnerability has been found in the affected software, classified as problematic. The manipulation leads to cross site scripting. The attack can be launched remotely.

Recommendations For Auto Upload Images versions up to 3.3.0, upgrade to version 3.3.1 to address this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-4632

Affected Products

Auto Upload Images

References · 7

• https://github.com/airani/wp-auto-upload/commit/895770ee93887ec78429c78ffdfb865bee6f9436 · Patch
• https://osv.dev/vulnerability/CVE-2022-4632 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4632 · Security Note
• https://github.com/airani/wp-auto-upload/releases/tag/v3.3.1 · Note
• https://t.me/cvenotify/40614 · Telegram Post
• https://vuldb.com/?id.216481 · Note
• https://t.me/cibsecurity/55077 · Telegram Post