PT-2022-27812 · Unknown · Auto Upload Images

CVE-2022-4632 · Published 2022-12-21 · Updated 2024-05-17

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Auto Upload Images versions up to 3.3.0

Description A vulnerability has been found in the affected software, classified as problematic. The manipulation leads to cross site scripting. The attack can be launched remotely.

Recommendations For Auto Upload Images versions up to 3.3.0, upgrade to version 3.3.1 to address this issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-4632

Affected Products

Auto Upload Images

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4632.json · Exploit
• https://github.com/airani/wp-auto-upload/commit/895770ee93887ec78429c78ffdfb865bee6f9436 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-4632 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4632 · Vendor Advisory
• https://github.com/airani/wp-auto-upload/releases/tag/v3.3.1 · Note
• https://t.me/cvenotify/40614 · Telegram Post
• https://vuldb.com/?id.216481 · Note
• https://t.me/cibsecurity/55077 · Telegram Post